@vyuhlabs/dxkit 2.4.5 → 2.4.7

package/dist/analyzers/tools/tools-unavailable-prose.js

@@ -0,0 +1,69 @@
+"use strict";
+// Renderer-side prose split for the `toolsUnavailable` list.
+//
+// `pushUnavailable` (in health.ts) builds entries shaped `<tool>
+// (<reason>)`, where `<reason>` comes from the provider's outcome
+// channel — `not installed` / `timed out at <N>s` / `exit code N
+// (stderr: ...)` / `no output (stderr: ...)` / `no output` /
+// `parse error` / etc. The reason text is honest; the historical
+// renderer header "Tools unavailable" wasn't — a reader reasonably
+// concluded the tool needed installing, when in fact it was attempted
+// and failed at runtime.
+//
+// This module categorizes entries by reading the suffix and routes
+// them to two honest headers:
+//
+//   - "Tools not installed"         → reason `(not installed)`
+//                                      → user action: `tools install`
+//   - "Tools that failed at runtime" → any other reason
+//                                      → user action: investigate the run
+//                                        (e.g. narrow scan scope, raise
+//                                        memory, check stderr first line)
+//
+// Every renderer prose surface that previously printed
+// `**Tools unavailable:** <flat list>` now calls
+// `renderToolsUnavailableLines` so the prose split is applied
+// uniformly across cli, tests, security, quality, bom, health/detailed.
+// The xlsx BoM emits two worksheet rows via `splitToolsUnavailable`
+// for the same effect.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.splitToolsUnavailable = splitToolsUnavailable;
+exports.renderToolsUnavailableLines = renderToolsUnavailableLines;
+/**
+ * Split a flat `toolsUnavailable` list into the two honesty categories.
+ * Entries shaped `<tool> (not installed)` route to `notInstalled` with
+ * the suffix stripped; everything else (including bare tool names with
+ * no `(<reason>)` suffix at all) routes to `failedAtRuntime` unchanged.
+ */
+function splitToolsUnavailable(entries) {
+    const notInstalled = [];
+    const failedAtRuntime = [];
+    for (const entry of entries) {
+        if (/ \(not installed\)\s*$/.test(entry)) {
+            notInstalled.push(entry.replace(/ \(not installed\)\s*$/, ''));
+        }
+        else {
+            failedAtRuntime.push(entry);
+        }
+    }
+    return { notInstalled, failedAtRuntime };
+}
+/**
+ * Render the two honest header lines for markdown renderers. Returns
+ * an empty array when both categories are empty (so callers can spread
+ * the result into a `lines.push(...)` without an explicit length guard).
+ */
+function renderToolsUnavailableLines(entries) {
+    if (entries.length === 0)
+        return [];
+    const { notInstalled, failedAtRuntime } = splitToolsUnavailable(entries);
+    const lines = [];
+    if (notInstalled.length > 0) {
+        lines.push(`**Tools not installed:** ${notInstalled.join(', ')}`);
+    }
+    if (failedAtRuntime.length > 0) {
+        lines.push(`**Tools that failed at runtime:** ${failedAtRuntime.join(', ')}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=tools-unavailable-prose.js.map

package/dist/analyzers/tools/tools-unavailable-prose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-unavailable-prose.js","sourceRoot":"","sources":["../../../src/analyzers/tools/tools-unavailable-prose.ts"],"names":[],"mappings":";AAAA,6DAA6D;AAC7D,EAAE;AACF,iEAAiE;AACjE,kEAAkE;AAClE,iEAAiE;AACjE,6DAA6D;AAC7D,iEAAiE;AACjE,mEAAmE;AACnE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,mEAAmE;AACnE,8BAA8B;AAC9B,EAAE;AACF,+DAA+D;AAC/D,sEAAsE;AACtE,wDAAwD;AACxD,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,EAAE;AACF,uDAAuD;AACvD,iDAAiD;AACjD,8DAA8D;AAC9D,wEAAwE;AACxE,oEAAoE;AACpE,uBAAuB;;AAavB,sDAWC;AAOD,kEAWC;AAnCD;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,OAAiB;IACrD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,OAAiB;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,qCAAqC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/analyzers/tools/upgrade-plan-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-plan-resolver.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/upgrade-plan-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,oCAAoC,CAAC;AAS7F;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,aAAa,CAKvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAkCxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAgB1E"}
+{"version":3,"file":"upgrade-plan-resolver.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/upgrade-plan-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,oCAAoC,CAAC;AAS7F;mEACmE;AACnE,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,aAAa,CAKvF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAkCxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,MAAM,CAsB1E"}

package/dist/analyzers/tools/upgrade-plan-resolver.js

@@ -114,6 +114,13 @@ function stampFromFreeTextAdvice(findings) {
         const m = f.upgradeAdvice.match(TRANSITIVE_ADVICE_RE);
         if (!m)
             continue;
+        // Defensive: skip the 0.0.0 sentinel that some upstream tools emit
+        // when no real transitive target exists. Producers should normally
+        // gate this at their own emission site (see the TS pack), but
+        // catching it here keeps the resolver honest if another producer
+        // adopts the same template without the guard.
+        if (m[2] === '0.0.0')
+            continue;
         f.upgradePlan = {
             parent: m[1],
             parentVersion: m[2],

package/dist/analyzers/tools/upgrade-plan-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade-plan-resolver.js","sourceRoot":"","sources":["../../../src/analyzers/tools/upgrade-plan-resolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;AAuBH,sEAKC;AAUD,sDAkCC;AAWD,0DAgBC;AA/FD;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,+DAA+D,CAAC;AAS7F;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,QAA0B;IACtE,OAAO;QACL,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC;QAC3C,YAAY,EAAE,uBAAuB,CAAC,QAAQ,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,QAA0B;IAC9D,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,SAAS;QAC7B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;iBAAM,IACL,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBACxC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EACxE,CAAC;gBACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,+DAA+D;IAC/D,oBAAoB;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,QAA0B;IAChE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW;YAAE,SAAS;QAC5B,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,SAAS;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,CAAC,CAAC,WAAW,GAAG;YACd,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACZ,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC;SAC9C,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"upgrade-plan-resolver.js","sourceRoot":"","sources":["../../../src/analyzers/tools/upgrade-plan-resolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;AAuBH,sEAKC;AAUD,sDAkCC;AAWD,0DAsBC;AArGD;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,+DAA+D,CAAC;AAS7F;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,QAA0B;IACtE,OAAO;QACL,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC;QAC3C,YAAY,EAAE,uBAAuB,CAAC,QAAQ,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CAAC,QAA0B;IAC9D,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,WAAW;YAAE,SAAS;QAC7B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;iBAAM,IACL,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBACxC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,EACxE,CAAC;gBACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,+DAA+D;IAC/D,oBAAoB;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,EAAE,CAAC;YACT,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,QAA0B;IAChE,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,WAAW;YAAE,SAAS;QAC5B,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,SAAS;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,mEAAmE;QACnE,mEAAmE;QACnE,8DAA8D;QAC9D,iEAAiE;QACjE,8CAA8C;QAC9C,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO;YAAE,SAAS;QAC/B,CAAC,CAAC,WAAW,GAAG;YACd,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YACZ,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,QAAQ,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC;SAC9C,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/analyzers/tools/vendored-advisor.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Advisory detection for files that *look* vendored / external but
+ * fell through the dxkit exclusion chain.
+ *
+ * The bundled `default-exclusions.gitignore` covers the common
+ * conventions (`vendor/`, `third_party/`, `third-party/`, `vendored/`,
+ * `playground/`, `lexical-playground/`, `node_modules/`, `dist/`, ...)
+ * but no curated list can capture every customer's vendored-code
+ * organization. A common case the bundled defaults deliberately do
+ * NOT exclude is `libs/` — many real codebases (Lerna monorepos, Nx
+ * workspaces, npm workspaces) host first-party packages under that
+ * directory, so blanket-excluding it would silently hide legitimate
+ * source.
+ *
+ * Instead of forcing a choice between "false-positive exclusions"
+ * and "vendored files distorting metrics," this module surfaces
+ * customer-visible guidance: when a path that LOOKS vendored slips
+ * into a metric like `largestFiles`, the renderer appends a tip
+ * pointing at the `.dxkit-ignore` escape hatch. Customers keep
+ * authority over what's in scope; we keep the report honest by
+ * naming what looks suspicious.
+ *
+ * Detection is conservative — only path segments that strongly
+ * signal vendored code in the wild trigger the advisory. False-
+ * positives are acceptable (the tip is advisory, not an action);
+ * false-negatives just leave the metric as-is.
+ */
+/**
+ * Check if a relative POSIX path contains a suspect-vendored token.
+ * Anchors the check with leading slash so `/libs/` matches a directory
+ * boundary, not a filename like `libs-helper.ts`.
+ */
+export declare function looksVendored(relPath: string): boolean;
+/**
+ * Filter a `largestFiles`-shaped list to entries that look vendored.
+ * Used by report renderers to emit a single advisory block ("these
+ * files look vendored; consider `.dxkit-ignore`") when the top-N
+ * leaks suspect paths through.
+ */
+export declare function suspectVendoredEntries<T extends {
+    path: string;
+}>(files: ReadonlyArray<T>): T[];
+//# sourceMappingURL=vendored-advisor.d.ts.map

package/dist/analyzers/tools/vendored-advisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendored-advisor.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/vendored-advisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA6DH;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGtD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAE/F"}

package/dist/analyzers/tools/vendored-advisor.js

@@ -0,0 +1,107 @@
+"use strict";
+/**
+ * Advisory detection for files that *look* vendored / external but
+ * fell through the dxkit exclusion chain.
+ *
+ * The bundled `default-exclusions.gitignore` covers the common
+ * conventions (`vendor/`, `third_party/`, `third-party/`, `vendored/`,
+ * `playground/`, `lexical-playground/`, `node_modules/`, `dist/`, ...)
+ * but no curated list can capture every customer's vendored-code
+ * organization. A common case the bundled defaults deliberately do
+ * NOT exclude is `libs/` — many real codebases (Lerna monorepos, Nx
+ * workspaces, npm workspaces) host first-party packages under that
+ * directory, so blanket-excluding it would silently hide legitimate
+ * source.
+ *
+ * Instead of forcing a choice between "false-positive exclusions"
+ * and "vendored files distorting metrics," this module surfaces
+ * customer-visible guidance: when a path that LOOKS vendored slips
+ * into a metric like `largestFiles`, the renderer appends a tip
+ * pointing at the `.dxkit-ignore` escape hatch. Customers keep
+ * authority over what's in scope; we keep the report honest by
+ * naming what looks suspicious.
+ *
+ * Detection is conservative — only path segments that strongly
+ * signal vendored code in the wild trigger the advisory. False-
+ * positives are acceptable (the tip is advisory, not an action);
+ * false-negatives just leave the metric as-is.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.looksVendored = looksVendored;
+exports.suspectVendoredEntries = suspectVendoredEntries;
+/**
+ * Path tokens that strongly suggest a file is vendored / external in
+ * its containing directory's role. Matched as case-insensitive path
+ * segments (`/libs/` matches `public/snapXReditor/libs/colorpicker/`
+ * but not a file named `libs-utils.ts`).
+ *
+ * Keep this list tight — only patterns we've observed in real
+ * customer audits as the dominant signal that a path is vendored
+ * code the project team doesn't maintain. Patterns that ALSO
+ * frequently host first-party source (e.g. `assets/`, `data/`,
+ * `examples/`) are deliberately omitted.
+ */
+const SUSPECT_VENDORED_TOKENS = [
+    '/libs/',
+    '/colorpicker/',
+    '/playground/',
+    '/lexical-playground/',
+    '/bundled/',
+    '/external/',
+    '/_vendor/',
+    '/third_party/',
+    '/third-party/',
+    '/vendored/',
+    // Map-rendering libraries (mapbox-gl, leaflet, cesium) commonly
+    // shipped as pre-built JS bundles into public/. Customer-authored
+    // map UI lives in src/; vendored copies land under public/map/.
+    '/mapbox-gl/',
+    '/leaflet/',
+    '/cesium/',
+    '/map/js/',
+    '/map/lib/',
+    // SAP Business One / ByDesign SDK proxy classes. Reverse-engineered
+    // from the ERP data model — property-bag DTOs with hundreds of
+    // classes and zero method bodies, indistinguishable from human
+    // code by extension alone. Project-team doesn't author them.
+    '/sapb1/',
+    '/sapbyd/',
+    '/odata/',
+    // WCF "Connected Services" + gRPC + protobuf generated proxy code.
+    // Tooling regenerates these wholesale; they should not surface in
+    // largest-files or densest-file rankings.
+    '/connectedservices/',
+    '/connectedservice/',
+    '/grpcgenerated/',
+    '/protogenerated/',
+];
+// The token list above is a tactical interim — every entry was
+// added in response to a specific customer audit, and the pattern
+// of "find a new vendored convention, hardcode another token" doesn't
+// converge. Pre-3.0.0 plan: replace this whole module with an
+// agent / skill that runs at `vyuh-dxkit init` / `update` time,
+// analyzes the customer's repo via graphify (looking for files with
+// proxy-shape signatures — high class:method ratio, no autogen
+// header, anomalous file size), and proposes `.dxkit-ignore`
+// entries. Scoped in the next graphify session per user direction
+// 2026-05-17 — see `tmp/next-session-graphify-deep-dive.md` and
+// `tmp/graphify-capabilities-expansion.md`.
+/**
+ * Check if a relative POSIX path contains a suspect-vendored token.
+ * Anchors the check with leading slash so `/libs/` matches a directory
+ * boundary, not a filename like `libs-helper.ts`.
+ */
+function looksVendored(relPath) {
+    const anchored = ('/' + relPath).toLowerCase();
+    return SUSPECT_VENDORED_TOKENS.some((t) => anchored.includes(t));
+}
+/**
+ * Filter a `largestFiles`-shaped list to entries that look vendored.
+ * Used by report renderers to emit a single advisory block ("these
+ * files look vendored; consider `.dxkit-ignore`") when the top-N
+ * leaks suspect paths through.
+ */
+function suspectVendoredEntries(files) {
+    return files.filter((f) => looksVendored(f.path));
+}
+//# sourceMappingURL=vendored-advisor.js.map

package/dist/analyzers/tools/vendored-advisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendored-advisor.js","sourceRoot":"","sources":["../../../src/analyzers/tools/vendored-advisor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAkEH,sCAGC;AAQD,wDAEC;AA7ED;;;;;;;;;;;GAWG;AACH,MAAM,uBAAuB,GAAG;IAC9B,QAAQ;IACR,eAAe;IACf,cAAc;IACd,sBAAsB;IACtB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,eAAe;IACf,eAAe;IACf,YAAY;IACZ,gEAAgE;IAChE,kEAAkE;IAClE,gEAAgE;IAChE,aAAa;IACb,WAAW;IACX,UAAU;IACV,UAAU;IACV,WAAW;IACX,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,6DAA6D;IAC7D,SAAS;IACT,UAAU;IACV,SAAS;IACT,mEAAmE;IACnE,kEAAkE;IAClE,0CAA0C;IAC1C,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;CACnB,CAAC;AAEF,+DAA+D;AAC/D,kEAAkE;AAClE,sEAAsE;AACtE,8DAA8D;AAC9D,gEAAgE;AAChE,oEAAoE;AACpE,+DAA+D;AAC/D,6DAA6D;AAC7D,kEAAkE;AAClE,gEAAgE;AAChE,4CAA4C;AAE5C;;;;GAIG;AACH,SAAgB,aAAa,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAA6B,KAAuB;IACxF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/analyzers/tools/walk-paths.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Canonical depth-unlimited path walker for language packs.
+ *
+ * Every pack that needs to discover its manifest files (`.csproj` /
+ * `.sln` for C#, `pyproject.toml` / `setup.py` for Python,
+ * `build.gradle.kts` for Kotlin, `pom.xml` for Java, `Gemfile` for
+ * Ruby, etc.) routes through `walkPaths`. ONE walker — no per-pack
+ * recursive readdir reimplementations, no hardcoded depth caps that
+ * silently miss deep monorepo structures.
+ *
+ * Why a separate primitive from `walk-source-files.ts`:
+ *
+ *   - `walkSourceFiles` resolves auto-generated patterns + test
+ *     patterns + default extensions from the language registry
+ *     (`LANGUAGES.flatMap(...)`). Language pack modules that need
+ *     manifest discovery during their own initialization can't import
+ *     that — circular dependency, partially-loaded registry entries
+ *     surface as `undefined`-property reads at module-eval time.
+ *
+ *   - This walker is the foundational layer: pure FS traversal +
+ *     `isExcludedPath` (gitignore + bundled defaults) + extension
+ *     filter. No LANGUAGES touch, no autogen/test heuristics. Safe to
+ *     call from any pack at any point in the load order.
+ *
+ * Behavioral contract:
+ *
+ *   - **Depth-unlimited.** The single largest class of latent bugs
+ *     the previous per-pack walkers shipped: `maxDepth = 2/3/4/5`
+ *     caps chosen by each pack author based on their idea of "deep
+ *     enough." Real customer monorepos routinely exceed every one of
+ *     those values (dpl-studio: 6–9). This walker walks the whole
+ *     tree minus exclusions, period.
+ *
+ *   - **Exclusion-aware.** Honors the bundled exclusion list
+ *     (`node_modules`, `bin`, `obj`, `vendor`, `dist`, `target`, …)
+ *     plus the project's `.gitignore` + `.dxkit-ignore` via the
+ *     canonical `isExcludedPath`. Same answer the rest of dxkit
+ *     uses.
+ *
+ *   - **Dot-directory pruning.** `.git`, `.vscode`, `.idea`,
+ *     `.dxkit`, etc. are universally skipped even when not in
+ *     `.gitignore`.
+ *
+ *   - **POSIX paths, relative to cwd, sorted.** Deterministic for
+ *     test fixtures and snapshot comparisons.
+ */
+export interface WalkPathsOpts {
+    /**
+     * File extensions to include (e.g., `['.csproj', '.sln']`). Matched
+     * against `path.extname(file)`, so values must include the leading
+     * dot. An empty list returns no files.
+     */
+    extensions: string[];
+    /**
+     * Apply `.gitignore` + `.dxkit-ignore` + bundled default
+     * exclusions? Default `true`. Set `false` only when the caller
+     * genuinely needs a raw FS view (rare).
+     */
+    respectIgnore?: boolean;
+    /**
+     * Restrict to specific basename matches in ADDITION to the
+     * extension filter (e.g., `['Gemfile', 'Gemfile.lock']` for
+     * extensionless manifest files). When provided, a file passes
+     * if EITHER its extension is in `extensions` OR its basename is
+     * in `basenames`. Defaults to `[]` (extension-only matching).
+     */
+    basenames?: string[];
+}
+export declare function clearWalkPathsCache(): void;
+/**
+ * Walk the tree rooted at `cwd` and return every file matching the
+ * extension or basename filter, depth-unlimited, exclusion-aware.
+ * Returns POSIX-style relative paths, sorted. Never throws —
+ * unreadable directories are skipped and the partial result is
+ * returned.
+ */
+export declare function walkPaths(cwd: string, opts: WalkPathsOpts): string[];
+//# sourceMappingURL=walk-paths.d.ts.map

package/dist/analyzers/tools/walk-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-paths.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/walk-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAMH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAOD,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,EAAE,CAapE"}

package/dist/analyzers/tools/walk-paths.js

@@ -0,0 +1,150 @@
+"use strict";
+/**
+ * Canonical depth-unlimited path walker for language packs.
+ *
+ * Every pack that needs to discover its manifest files (`.csproj` /
+ * `.sln` for C#, `pyproject.toml` / `setup.py` for Python,
+ * `build.gradle.kts` for Kotlin, `pom.xml` for Java, `Gemfile` for
+ * Ruby, etc.) routes through `walkPaths`. ONE walker — no per-pack
+ * recursive readdir reimplementations, no hardcoded depth caps that
+ * silently miss deep monorepo structures.
+ *
+ * Why a separate primitive from `walk-source-files.ts`:
+ *
+ *   - `walkSourceFiles` resolves auto-generated patterns + test
+ *     patterns + default extensions from the language registry
+ *     (`LANGUAGES.flatMap(...)`). Language pack modules that need
+ *     manifest discovery during their own initialization can't import
+ *     that — circular dependency, partially-loaded registry entries
+ *     surface as `undefined`-property reads at module-eval time.
+ *
+ *   - This walker is the foundational layer: pure FS traversal +
+ *     `isExcludedPath` (gitignore + bundled defaults) + extension
+ *     filter. No LANGUAGES touch, no autogen/test heuristics. Safe to
+ *     call from any pack at any point in the load order.
+ *
+ * Behavioral contract:
+ *
+ *   - **Depth-unlimited.** The single largest class of latent bugs
+ *     the previous per-pack walkers shipped: `maxDepth = 2/3/4/5`
+ *     caps chosen by each pack author based on their idea of "deep
+ *     enough." Real customer monorepos routinely exceed every one of
+ *     those values (dpl-studio: 6–9). This walker walks the whole
+ *     tree minus exclusions, period.
+ *
+ *   - **Exclusion-aware.** Honors the bundled exclusion list
+ *     (`node_modules`, `bin`, `obj`, `vendor`, `dist`, `target`, …)
+ *     plus the project's `.gitignore` + `.dxkit-ignore` via the
+ *     canonical `isExcludedPath`. Same answer the rest of dxkit
+ *     uses.
+ *
+ *   - **Dot-directory pruning.** `.git`, `.vscode`, `.idea`,
+ *     `.dxkit`, etc. are universally skipped even when not in
+ *     `.gitignore`.
+ *
+ *   - **POSIX paths, relative to cwd, sorted.** Deterministic for
+ *     test fixtures and snapshot comparisons.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearWalkPathsCache = clearWalkPathsCache;
+exports.walkPaths = walkPaths;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const exclusions_1 = require("./exclusions");
+// Memoization keyed by `(cwd, opts-fingerprint)`. Mirrors
+// `walk-source-files`'s cache pattern so repeat callers within one
+// process pay the walk cost once.
+const walkCache = new Map();
+function clearWalkPathsCache() {
+    walkCache.clear();
+}
+/**
+ * Walk the tree rooted at `cwd` and return every file matching the
+ * extension or basename filter, depth-unlimited, exclusion-aware.
+ * Returns POSIX-style relative paths, sorted. Never throws —
+ * unreadable directories are skipped and the partial result is
+ * returned.
+ */
+function walkPaths(cwd, opts) {
+    const respectIgnore = opts.respectIgnore ?? true;
+    const extensions = new Set(opts.extensions.map((e) => (e.startsWith('.') ? e : `.${e}`)));
+    const basenames = new Set(opts.basenames ?? []);
+    const cacheKey = `${cwd}\0${[...extensions].sort().join(',')}\0${[...basenames].sort().join(',')}\0${respectIgnore}`;
+    const hit = walkCache.get(cacheKey);
+    if (hit)
+        return hit;
+    const out = [];
+    walkDir(cwd, '', { extensions, basenames, respectIgnore }, out);
+    out.sort();
+    walkCache.set(cacheKey, out);
+    return out;
+}
+function walkDir(cwd, relDir, opts, out) {
+    const absDir = relDir ? path.join(cwd, relDir) : cwd;
+    let entries;
+    try {
+        entries = fs.readdirSync(absDir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const ent of entries) {
+        const relPath = relDir ? `${relDir}/${ent.name}` : ent.name;
+        if (ent.isDirectory()) {
+            // Always skip dot-directories — universal noise (.git, .vscode,
+            // .idea, .dxkit, .ci, …). Many aren't in `.gitignore` but no
+            // sane manifest discovery wants them.
+            if (ent.name.startsWith('.'))
+                continue;
+            // Bundled excludes (node_modules, bin, obj, vendor, target,
+            // dist, …) + project `.gitignore`/`.dxkit-ignore`.
+            if (opts.respectIgnore && (0, exclusions_1.isExcludedPath)(cwd, relPath))
+                continue;
+            walkDir(cwd, relPath, opts, out);
+            continue;
+        }
+        if (!ent.isFile())
+            continue;
+        const ext = path.extname(ent.name);
+        const matches = opts.extensions.has(ext) || opts.basenames.has(ent.name);
+        if (!matches)
+            continue;
+        if (opts.respectIgnore && (0, exclusions_1.isExcludedPath)(cwd, relPath))
+            continue;
+        out.push(relPath);
+    }
+}
+//# sourceMappingURL=walk-paths.js.map

package/dist/analyzers/tools/walk-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-paths.js","sourceRoot":"","sources":["../../../src/analyzers/tools/walk-paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCH,kDAEC;AASD,8BAaC;AA1DD,uCAAyB;AACzB,2CAA6B;AAC7B,6CAA8C;AA2B9C,0DAA0D;AAC1D,mEAAmE;AACnE,kCAAkC;AAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE9C,SAAgB,mBAAmB;IACjC,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,SAAS,CAAC,GAAW,EAAE,IAAmB;IACxD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,aAAa,EAAE,CAAC;IACrH,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;IAChE,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,SAAS,OAAO,CAAC,GAAW,EAAE,MAAc,EAAE,IAAkB,EAAE,GAAa;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAE5D,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,gEAAgE;YAChE,6DAA6D;YAC7D,sCAAsC;YACtC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACvC,4DAA4D;YAC5D,mDAAmD;YACnD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAA,2BAAc,EAAC,GAAG,EAAE,OAAO,CAAC;gBAAE,SAAS;YACjE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,SAAS;QAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAA,2BAAc,EAAC,GAAG,EAAE,OAAO,CAAC;YAAE,SAAS;QAEjE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/analyzers/tools/walk-source-files.d.ts

@@ -0,0 +1,70 @@
+import type { LanguageId } from '../../types';
+export interface WalkOpts {
+    /** Restrict to specific extensions (e.g. `['.ts', '.tsx']`). Default:
+     *  union across every registered language pack. */
+    extensions?: string[];
+    /** Include test files? Default: false. Test files are matched by
+     *  `allTestFilePatterns()` — basename globs (`*.test.ts`) and
+     *  path-anchored patterns (`tests/*.rs`). */
+    includeTests?: boolean;
+    /** Include auto-generated files (basename glob + 2KB header marker)?
+     *  Default: false. Matches the post-D028 canonical "counted source
+     *  file" predicate. */
+    includeAutogen?: boolean;
+    /** Apply `.gitignore` + `.dxkit-ignore` + bundled defaults? Default:
+     *  true. Set false only for paths that genuinely need a raw FS view. */
+    respectIgnore?: boolean;
+    /** Restrict to one language pack's `sourceExtensions`. Default: all. */
+    packId?: LanguageId;
+}
+export declare function clearWalkCache(): void;
+/**
+ * Walk the source tree rooted at `cwd` and return relative POSIX paths
+ * (no leading `./`) sorted for determinism. Returns `[]` for non-
+ * existent or non-directory roots — never throws.
+ */
+export declare function walkSourceFiles(cwd: string, opts?: WalkOpts): string[];
+export interface CountOpts {
+    /** 'files' = count of files with ≥1 match. 'lines' = total match
+     *  count across all lines. Default: 'lines'. */
+    mode?: 'files' | 'lines';
+    /** Skip lines whose match falls on a comment line. Default: false.
+     *  D074 closure — pre-fix, line-counters matched a commented-out
+     *  occurrence of a target call the same as a live one and inflated
+     *  counts 2x+ on commented-code-heavy codebases (platform: 1578
+     *  reported / 733 active for the JS print-statement family).
+     *
+     *  Per-file comment marker chosen by extension:
+     *    .ts/.tsx/.js/.jsx/.go/.rs/.java/.kt/.kts/.cs/.cpp/.c/.h/.hpp/.swift  -> slash-style
+     *    .py/.rb/.sh/.yml/.yaml/.toml                                          -> hash-style
+     *  Files with no known mapping are scanned as-is (no comment filter). */
+    skipComments?: boolean;
+    /** Return top-N (by match count) offender list. Default: 0 (skip). */
+    perFileTopN?: number;
+}
+export interface CountResult {
+    /** Sum of matches across all walked files. */
+    lines: number;
+    /** Count of files with ≥1 match. */
+    files: number;
+    /** Top-N offenders. Empty unless `perFileTopN > 0`. */
+    perFile: Array<{
+        file: string;
+        count: number;
+    }>;
+}
+/**
+ * Read each file once, scan in-process. Pass `patterns` as compiled
+ * regexes for repeated use, or as strings (compiled here with global
+ * flag). Each line is tested against the alternation; multiple
+ * patterns are unioned via `RegExp` `|` — pass them pre-merged for
+ * best performance.
+ */
+export declare function countLineMatches(cwd: string, files: string[], patterns: RegExp[] | string[], opts?: CountOpts): CountResult;
+export type CommentSyntax = 'slash' | 'hash' | 'none';
+export declare function commentSyntaxFor(relPath: string): CommentSyntax;
+export declare function isCommentLine(rawLine: string, syntax: CommentSyntax): boolean;
+/** Surface the pack-aware `sourceExtensions` for a given packId. Used
+ *  when callers want to walk one pack's files but bypass the registry. */
+export declare function packSourceExtensions(packId: LanguageId): string[];
+//# sourceMappingURL=walk-source-files.d.ts.map

package/dist/analyzers/tools/walk-source-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk-source-files.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/walk-source-files.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAI9C,MAAM,WAAW,QAAQ;IACvB;uDACmD;IACnD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;iDAE6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;2BAEuB;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;4EACwE;IACxE,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,wEAAwE;IACxE,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAeD,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,MAAM,EAAE,CAe1E;AAoJD,MAAM,WAAW,SAAS;IACxB;oDACgD;IAChD,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAEzB;;;;;;;;;6EASyE;IACzE,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAC7B,IAAI,GAAE,SAAc,GACnB,WAAW,CAqDb;AAmBD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAqC/D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAQ7E;AAID;0EAC0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAEjE"}