@vyuhlabs/dxkit 2.4.6 → 2.4.7

package/dist/analyzers/tools/exclusions.js

@@ -54,9 +54,10 @@ exports.clearExclusionsCache = clearExclusionsCache;
 exports.isExcludedPath = isExcludedPath;
 exports.getFindExcludeFlags = getFindExcludeFlags;
 exports.getGrepExcludeDirFlags = getGrepExcludeDirFlags;
-exports.getClocExcludeDirs = getClocExcludeDirs;
+exports.getClocExcludeFlags = getClocExcludeFlags;
 exports.getSemgrepExcludeFlags = getSemgrepExcludeFlags;
-exports.getPythonExcludeSet = getPythonExcludeSet;
+exports.getJscpdIgnorePatterns = getJscpdIgnorePatterns;
+exports.getPythonExcludeFilter = getPythonExcludeFilter;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 /** Memo: one entry per cwd so repeated helper calls don't re-read files. */
@@ -206,18 +207,33 @@ function getGrepExcludeDirFlags(cwd) {
     return dirs.map((d) => `--exclude-dir='${d}'`).join(' ');
 }
 /**
- * Build cloc `--exclude-dir` argument value (comma-separated basenames).
- * cloc matches basenames only, so multi-segment sourcePaths get flattened.
+ * Build cloc exclusion flags — `--exclude-dir` (basenames) PLUS
+ * `--fullpath --not-match-d` (Perl regex on full directory path) for
+ * multi-segment sourcePaths.
+ *
+ * D055 (2.4.7): pre-fix, multi-segment paths in `.dxkit-ignore` were
+ * flattened to basenames here, so `Dev/Addons/DPLAddon/SAPB1/` silently
+ * became `{Dev, Addons, DPLAddon, SAPB1}` — cloc then excluded EVERY
+ * directory named `Dev` in the tree, killing 90% of source visibility
+ * on dpl-studio. The split-flag construction preserves the path
+ * structure for cloc.
+ *
+ * The regex is anchored on path-segment boundaries with `(?:^|/)` /
+ * `(?:/|$)` so `Dev/Addons/Foo` doesn't accidentally match `Dev/AddonsX`
+ * or `XDev/Addons`. Path components are regex-escaped so `.`, `+`, etc.
+ * aren't interpreted as metachars.
  */
-function getClocExcludeDirs(cwd) {
+function getClocExcludeFlags(cwd) {
     const { dirs, sourcePaths } = loadExclusions(cwd);
-    const basenames = new Set(dirs);
-    for (const p of sourcePaths) {
-        for (const seg of p.split('/'))
-            if (seg)
-                basenames.add(seg);
+    const parts = [];
+    if (dirs.length > 0) {
+        parts.push(`--exclude-dir=${dirs.join(',')}`);
+    }
+    if (sourcePaths.length > 0) {
+        const escaped = sourcePaths.map(escapeRegex);
+        parts.push(`--fullpath --not-match-d='(?:^|/)(?:${escaped.join('|')})(?:/|$)'`);
     }
-    return Array.from(basenames).join(',');
+    return parts.join(' ');
 }
 /**
  * Build semgrep `--exclude` flags (one per directory/pattern).
@@ -229,22 +245,75 @@ function getSemgrepExcludeFlags(cwd) {
     const fileFlags = filePatterns.map((p) => `--exclude '${p}'`).join(' ');
     return `${dirFlags} ${fileFlags}`;
 }
-/**
- * Python set literal for graphify script — basenames only (flattened paths).
- * Used as a template substitution in the embedded Python script.
- */
-function getPythonExcludeSet(cwd) {
-    const { dirs, sourcePaths } = loadExclusions(cwd);
-    const basenames = new Set(dirs);
+// Build jscpd `--ignore` glob patterns from the centralized exclusion set.
+//
+// jscpd's `--ignore` accepts a comma-separated glob list. Each pattern is
+// prefixed with the recursive-globstar segment so it matches at any
+// directory depth — the same convention `gatherJscpdResult` already uses
+// for autogen patterns.
+//
+// Mapping:
+//   - dirs (basenames)         → recursive-glob/<name>/recursive-glob
+//   - sourcePaths (multi-seg)  → recursive-glob/<path>/recursive-glob
+//   - filePatterns (globs)     → recursive-glob/<glob>
+//
+// Plumbs the same exclusion set the in-process walkers honor (grep, cloc,
+// semgrep, graphify's Python filter) into jscpd's subprocess argument
+// builder. Without this, jscpd only saw the autogen patterns + `--gitignore`,
+// which left it descending into committed-vendored trees that aren't in the
+// project's `.gitignore` — token tables exhaust heap on minified bundles,
+// jscpd gets OOM-killed before flushing its JSON report, and the report
+// reads "Duplication unavailable" on the very repos that need it most.
+//
+// Returns an array so callers can union with tool-specific extras (e.g.
+// `allAutogenSourcePatterns()` in jscpd's wrapper) before joining.
+function getJscpdIgnorePatterns(cwd) {
+    const { dirs, sourcePaths, filePatterns } = loadExclusions(cwd);
+    const out = [];
+    for (const d of dirs) {
+        out.push(`**/${d}/**`);
+    }
     for (const p of sourcePaths) {
-        for (const seg of p.split('/'))
-            if (seg)
-                basenames.add(seg);
+        const trimmed = p.replace(/\/+$/, '');
+        if (trimmed)
+            out.push(`**/${trimmed}/**`);
+    }
+    for (const f of filePatterns) {
+        out.push(`**/${f}`);
     }
-    return ('{' +
-        Array.from(basenames)
-            .map((d) => `'${d}'`)
-            .join(', ') +
-        '}');
+    return out;
+}
+/**
+ * Python literals for the graphify walker — emits both a basename set
+ * (`EXCLUDE_DIRS`) and a multi-segment path list (`EXCLUDE_PATHS`) so
+ * the Python filter can preserve the path structure of multi-segment
+ * `.dxkit-ignore` entries.
+ *
+ * D055 (2.4.7): pre-fix, basenames-only flattening here meant
+ * `Dev/Addons/DPLAddon/SAPB1/` became `{Dev, Addons, DPLAddon, SAPB1}`
+ * — graphify then skipped every `Dev/` subtree in dpl-studio (10 files
+ * walked instead of ~1700, Functions=13). The two-set shape lets the
+ * walker check basenames via segment membership AND check paths via
+ * substring match on the file's relpath.
+ */
+function getPythonExcludeFilter(cwd) {
+    const { dirs, sourcePaths, filePatterns } = loadExclusions(cwd);
+    // `set([...])` rather than `{...}` because `{}` is an empty dict in Python.
+    const dirsSet = `set([${dirs.map((d) => `'${d}'`).join(', ')}])`;
+    const pathsList = '[' + sourcePaths.map((p) => `'${p}'`).join(', ') + ']';
+    // File-glob patterns (`*.min.js`, `*.bundle.js`, `*.chunk.js`,
+    // `*.generated.ts`, `*.d.ts`). Pre-extension only `dirs` + `sourcePaths`
+    // were passed; the graphify walker enumerated every `*.min.js`
+    // matching basename and graphify's AST extractor analyzed them.
+    // Web-client's densest-file metric ranked
+    // `public/3DFileViewer/assets/index-j54KQSsm.js` (a webpack-hash
+    // bundle) as 4,606 "functions" — the kind of metric that makes the
+    // "split your densest file" recommendation read as a bug to anyone
+    // who knows what the file is.
+    const fileGlobsList = '[' + filePatterns.map((p) => `'${p}'`).join(', ') + ']';
+    return { dirsSet, pathsList, fileGlobsList };
+}
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 }
 //# sourceMappingURL=exclusions.js.map

package/dist/analyzers/tools/exclusions.js.map

@@ -1 +1 @@
-{"version":3,"file":"exclusions.js","sourceRoot":"","sources":["../../../src/analyzers/tools/exclusions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BH,wCAmBC;AAGD,oDAEC;AA4ED,wCAaC;AAyBD,kDAIC;AAMD,wDAGC;AAMD,gDAOC;AAMD,wDAKC;AAMD,kDAaC;AA3ND,uCAAyB;AACzB,2CAA6B;AAY7B,4EAA4E;AAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C,4DAA4D;AAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,kBAAkB,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACnE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAClF,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAErF,MAAM,QAAQ,GAAe;QAC3B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;QAC7B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;KAChC,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qCAAqC;AACrC,SAAgB,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,kBAAkB,CACzB,QAAgB,EAChB,IAAiB,EACjB,WAAwB,EACxB,YAAyB;IAEzB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAEpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAEpD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,iDAAiD;QACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,kEAAkE;QAClE,sEAAsE;QACtE,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,kEAAkE;YAClE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAe;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY;IAClD,6DAA6D;IAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,KAAK,OAAO,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG;QACD,OAAO;aACJ,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;aACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QACtB,GAAG,CACN,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,GAAW,EAAE,kBAAkB,GAAG,IAAI;IACxE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAChD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG;gBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CACL,GAAG;QACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;aACpB,IAAI,CAAC,IAAI,CAAC;QACb,GAAG,CACJ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"exclusions.js","sourceRoot":"","sources":["../../../src/analyzers/tools/exclusions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BH,wCAmBC;AAGD,oDAEC;AA4ED,wCAaC;AAyBD,kDAIC;AAMD,wDAGC;AAmBD,kDAWC;AAMD,wDAKC;AAwBD,wDAcC;AAeD,wDAoBC;AAlSD,uCAAyB;AACzB,2CAA6B;AAY7B,4EAA4E;AAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE5C,4DAA4D;AAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,kBAAkB,CAAC,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACnE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAClF,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAErF,MAAM,QAAQ,GAAe;QAC3B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACf,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;QAC7B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;KAChC,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,qCAAqC;AACrC,SAAgB,oBAAoB;IAClC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,kBAAkB,CACzB,QAAgB,EAChB,IAAiB,EACjB,WAAwB,EACxB,YAAyB;IAEzB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAEpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAEpD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,iDAAiD;QACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,kEAAkE;QAClE,sEAAsE;QACtE,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,kEAAkE;YAClE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAe;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY;IAClD,6DAA6D;IAC7D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,KAAK,OAAO,CAAC;IAC1B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG;QACD,OAAO;aACJ,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC;aACpC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;aACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QACtB,GAAG,CACN,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,GAAW,EAAE,kBAAkB,GAAG,IAAI;IACxE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAChD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,GAAG,QAAQ,IAAI,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,yEAAyE;AACzE,wBAAwB;AACxB,EAAE;AACF,WAAW;AACX,sEAAsE;AACtE,sEAAsE;AACtE,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,mEAAmE;AACnE,SAAgB,sBAAsB,CAAC,GAAW;IAChD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,sBAAsB,CAAC,GAAW;IAKhD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChE,4EAA4E;IAC5E,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACjE,MAAM,SAAS,GAAG,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAC1E,+DAA+D;IAC/D,yEAAyE;IACzE,+DAA+D;IAC/D,gEAAgE;IAChE,0CAA0C;IAC1C,iEAAiE;IACjE,mEAAmE;IACnE,mEAAmE;IACnE,8BAA8B;IAC9B,MAAM,aAAa,GAAG,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAC/E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/analyzers/tools/generic.d.ts

@@ -1,4 +1,19 @@
+/**
+ * Generic tool runner -- uses grep, find, wc, git (and the canonical
+ * walkSourceFiles / countLineMatches helpers for source-line metrics).
+ * Works on any Unix machine with no external dependencies.
+ * This is Layer 0: always available.
+ */
 import { HealthMetrics } from '../types';
-/** Gather metrics using only built-in Unix tools. */
-export declare function gatherGenericMetrics(cwd: string): Partial<HealthMetrics>;
+import type { DetectedStack } from '../../types';
+/**
+ * Gather metrics using only built-in Unix tools + the canonical walker.
+ *
+ * `languageFlags` drives the architecturalShape-aware path counters
+ * (primary components, route handlers, data models). When omitted
+ * (legacy callers, tests) the path counters degrade to zero rather
+ * than silently using a hardcoded backend-centric default — every
+ * shipped caller in the codebase threads the active stack through.
+ */
+export declare function gatherGenericMetrics(cwd: string, languageFlags?: DetectedStack['languages']): Partial<HealthMetrics>;
 //# sourceMappingURL=generic.d.ts.map

package/dist/analyzers/tools/generic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generic.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/generic.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAqDzC,qDAAqD;AACrD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA4KxE"}
+{"version":3,"file":"generic.d.ts","sourceRoot":"","sources":["../../../src/analyzers/tools/generic.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA+DjD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,GACzC,OAAO,CAAC,aAAa,CAAC,CAiOxB"}

package/dist/analyzers/tools/generic.js

@@ -34,137 +34,233 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.gatherGenericMetrics = gatherGenericMetrics;
-/**
- * Generic tool runner -- uses grep, find, wc, git.
- * Works on any Unix machine with no external dependencies.
- * This is Layer 0: always available.
- */
-const fs = __importStar(require("fs"));
 const runner_1 = require("./runner");
 const exclusions_1 = require("./exclusions");
+const walk_source_files_1 = require("./walk-source-files");
+const debug_statements_1 = require("./debug-statements");
 const languages_1 = require("../../languages");
-// grepCount uses a narrow filter (node_modules, dist, __pycache__, .d.ts) to
-// preserve pre-refactor byte-equality. The broader EXCLUDED_DIRS list from
-// exclusions.ts is used for find-based counts. Widening this filter would
-// change legitimate metric totals and should be a separate, intentional change.
-const GREP_PIPELINE_FILTER = 'grep -v node_modules | grep -v dist | grep -v __pycache__';
-/** Reliable grep count that avoids shell escaping issues by writing pattern to a temp file. */
-function grepCount(cwd, pattern, includes) {
-    const patternFile = `/tmp/dxkit-grep-${Date.now()}-${Math.random().toString(36).slice(2)}.pat`;
-    fs.writeFileSync(patternFile, pattern);
-    const includeFlags = includes.map((i) => `--include='${i}'`).join(' ');
-    const result = (0, runner_1.run)(`grep -rEf '${patternFile}' ${includeFlags} . 2>/dev/null | ${GREP_PIPELINE_FILTER} | grep -v '.d.ts' | wc -l`, cwd);
-    try {
-        fs.unlinkSync(patternFile);
-    }
-    catch {
-        /* ignore */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+// D055/D056/D072 (2.4.7): every per-source-file metric (rawSourceFiles,
+// wc-l walk, jsConsoleCount, anyTypeCount, evalCount, docCommentFiles,
+// tlsDisabledCount, testFiles) routes through walkSourceFiles +
+// countLineMatches. Closes the class of "site-specific walker drift"
+// (D075/D077) and "grep maxBuffer overflow" (D082/D083/D084) by
+// construction: ONE walker, ONE counter, files pruned at the
+// directory boundary so we never read minified .min.js into memory.
+//
+// `EXCLUDE = getFindExcludeFlags(cwd)` is retained below for find
+// commands that count NON-source artifacts (controllers, models,
+// directories, ciConfigCount) — those legitimately walk path
+// patterns the walker doesn't model.
+/**
+ * Resolve the git toplevel for `cwd`. D026 (2.4.7): cross-cutting repo
+ * artifacts (`.github/`, `README.md`, `CONTRIBUTING.md`, `Makefile`,
+ * `.env.example`, etc.) conventionally live at the repo root, not in
+ * the subdirectory a user happens to scan. dpl-studio's baseline F8:
+ * customer ran `dxkit health Code/Source/`; both Documentation and DX
+ * dimensions returned 0/100 because none of those probes found
+ * matches in `Code/Source/`. The fix scopes those probes to the
+ * git toplevel.
+ *
+ * Returns `cwd` unchanged when `git rev-parse --show-toplevel` fails
+ * (not in a git repo, or git missing) so non-git workflows keep
+ * working — they just don't get the toplevel-scoped improvement.
+ */
+function resolveGitToplevel(cwd) {
+    const top = (0, runner_1.run)('git rev-parse --show-toplevel 2>/dev/null', cwd).trim();
+    return top.length > 0 ? top : cwd;
+}
+/**
+ * Count newlines in `content`. Equivalent to `wc -l` semantics:
+ * trailing newline NOT double-counted; file with no trailing newline
+ * still counts its last line.
+ */
+function lineCount(content) {
+    if (content.length === 0)
+        return 0;
+    let count = 0;
+    for (let i = 0; i < content.length; i++) {
+        if (content.charCodeAt(i) === 10 /* \n */)
+            count++;
     }
-    return parseInt(result) || 0;
+    // No trailing newline → the last partial line was a line too.
+    if (content.charCodeAt(content.length - 1) !== 10)
+        count++;
+    return count;
 }
-// EXCLUDE moved inside gatherGenericMetrics() — must be computed per-cwd now
-// so it picks up project-specific .gitignore / .dxkit-ignore entries.
-// Pack-driven find expressions (Phase 10i.0-LP.3). Replaces the
-// pre-LP hardcoded extension/pattern lists with iteration over the
-// language registry. Adding a 6th pack auto-extends both expressions.
-//
-// Behavior expansions vs pre-LP.3 (both more correct than before):
-//   - `.mjs`/`.cjs` now counted as source files (TypeScript pack
-//     declared them in `sourceExtensions`; the legacy hardcoded list
-//     missed them).
-//   - Rust integration tests under `tests/*.rs` now counted as test
-//     files (Rust pack declared `tests/*.rs` as a path-anchored
-//     pattern; the legacy used only `-name` and skipped path patterns).
-const SOURCE_EXTS = `\\( ${(0, languages_1.allSourceExtensions)()
-    .map((e) => `-name "*${e}"`)
-    .join(' -o ')} \\)`;
-const TEST_PATTERNS = (() => {
-    const { nameOnly, pathAnchored } = (0, languages_1.splitTestFilePatterns)();
-    const nameClauses = nameOnly.map((p) => `-name "${p}"`);
-    const pathClauses = pathAnchored.map((p) => `-path "*/${p}"`);
-    return `\\( ${[...nameClauses, ...pathClauses].join(' -o ')} \\)`;
-})();
-/** Gather metrics using only built-in Unix tools. */
-function gatherGenericMetrics(cwd) {
+/**
+ * Gather metrics using only built-in Unix tools + the canonical walker.
+ *
+ * `languageFlags` drives the architecturalShape-aware path counters
+ * (primary components, route handlers, data models). When omitted
+ * (legacy callers, tests) the path counters degrade to zero rather
+ * than silently using a hardcoded backend-centric default — every
+ * shipped caller in the codebase threads the active stack through.
+ */
+function gatherGenericMetrics(cwd, languageFlags) {
     const EXCLUDE = (0, exclusions_1.getFindExcludeFlags)(cwd);
-    // File counts
-    const sourceFiles = (0, runner_1.countLines)(`find . -type f ${SOURCE_EXTS} ${EXCLUDE}`, cwd);
-    const testFiles = (0, runner_1.countLines)(`find . -type f ${TEST_PATTERNS} ${EXCLUDE}`, cwd);
-    const testDirFiles = (0, runner_1.countLines)(`find . -type f ${SOURCE_EXTS} ${EXCLUDE} \\( -path "*/__tests__/*" -o -path "*/tests/*" -o -path "*/test/*" \\) 2>/dev/null`, cwd);
-    // Total lines, largest file, files over 500 — single find+xargs wc pass
-    const wcRaw = (0, runner_1.run)(`find . -type f ${SOURCE_EXTS} ${EXCLUDE} -print0 2>/dev/null | xargs -0 wc -l 2>/dev/null`, cwd, 120000);
+    // D026 (2.4.7): repo-level artifacts probed from git toplevel; code-
+    // level metrics (source-file counts, hygiene grep, semgrep) stay
+    // scoped to `cwd` so analyzing a subdirectory still measures that
+    // subdir's code quality.
+    const repoRoot = resolveGitToplevel(cwd);
+    // ─── Source / test file enumeration ───────────────────────────────────────
+    // ONE walker, every consumer routes through it. The walker's filter
+    // pipeline already applies: exclusions (.gitignore + .dxkit-ignore +
+    // bundled defaults), autogen basename globs (*.designer.cs etc.),
+    // autogen header markers (<auto-generated> / @generated / DO NOT EDIT),
+    // test-file patterns (per `includeTests`). Memoized per cwd+opts.
+    //
+    // 2.4.7 class-fix alignment: `sourceFiles` now excludes test files,
+    // matching test-gaps' definition. Pre-fix health included tests in
+    // `sourceFiles` (D075 same-label-different-meaning class). The
+    // Testing dimension's `testRatio = testFiles / sourceFiles` is
+    // mathematically equivalent (numerator drops to 0 simultaneously
+    // when there's a test file in the denominator), so user-visible
+    // scoring is unchanged in practice.
+    const sourceList = (0, walk_source_files_1.walkSourceFiles)(cwd);
+    const sourceListWithTests = (0, walk_source_files_1.walkSourceFiles)(cwd, { includeTests: true });
+    const testList = sourceListWithTests.filter((p) => !sourceList.includes(p));
+    // ─── Per-file line counts (replaces find + xargs wc -l) ───────────────────
+    // 2.4.7: pure in-process read. Catches the D028-header / autogen
+    // filtering at walker-time, so we don't need a second-pass header
+    // filter the way the old code did. Also: largestFiles + filesOver500.
+    const filteredFiles = [];
+    for (const relPath of sourceList) {
+        let content;
+        try {
+            content = fs.readFileSync(path.join(cwd, relPath), 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        filteredFiles.push({ path: relPath, lines: lineCount(content) });
+    }
     let totalLines = 0;
     let largestFileLines = 0;
     let largestFilePath = '';
     let filesOver500Lines = 0;
-    if (wcRaw) {
-        for (const line of wcRaw.split('\n')) {
-            const m = line.trim().match(/^(\d+)\s+(.+)$/);
-            if (!m)
-                continue;
-            const lines = parseInt(m[1]);
-            const file = m[2];
-            if (file === 'total') {
-                totalLines = lines;
-            }
-            else {
-                if (lines > largestFileLines) {
-                    largestFileLines = lines;
-                    largestFilePath = file;
-                }
-                if (lines > 500)
-                    filesOver500Lines++;
-            }
+    for (const f of filteredFiles) {
+        totalLines += f.lines;
+        if (f.lines > largestFileLines) {
+            largestFileLines = f.lines;
+            largestFilePath = f.path;
         }
-        // If only one file, xargs wc won't print "total"
-        if (totalLines === 0 && largestFileLines > 0)
-            totalLines = largestFileLines;
+        if (f.lines > 500)
+            filesOver500Lines++;
     }
-    // Console/debug statement count -- use grepCount helper for reliability
-    const jsConsoleCount = grepCount(cwd, 'console\\.(log|error|warn)', ['*.ts', '*.tsx', '*.js']);
-    const pyPrintCount = grepCount(cwd, '\\bprint\\(', ['*.py']);
-    const goPrintCount = grepCount(cwd, 'fmt\\.Print', ['*.go']);
-    const consoleLogCount = jsConsoleCount + pyPrintCount + goPrintCount;
-    // TypeScript ": any" count
-    const anyTypeCount = grepCount(cwd, ': any', ['*.ts', '*.tsx']);
-    // Documentation
-    const readmeExists = (0, runner_1.fileExists)(cwd, 'README.md', 'readme.md');
-    const readmeLines = parseInt((0, runner_1.run)("wc -l README.md 2>/dev/null | awk '{print $1}'", cwd)) || 0;
-    const docCommentFiles = (0, runner_1.countLines)("grep -rlE '/\\*\\*|^\"\"\"|^[[:space:]]*#[[:space:]]' --include='*.ts' --include='*.py' --include='*.go' . 2>/dev/null | grep -v node_modules | grep -v dist", cwd);
-    const apiDocsExist = (0, runner_1.fileExists)(cwd, 'openapi.json', 'openapi.yaml', 'swagger.json', 'swagger.yaml');
-    const architectureDocsExist = (0, runner_1.fileExists)(cwd, 'ARCHITECTURE.md', 'docs/', 'ADR/', 'adr/');
-    const contributingExists = (0, runner_1.fileExists)(cwd, 'CONTRIBUTING.md');
-    const changelogExists = (0, runner_1.fileExists)(cwd, 'CHANGELOG.md', 'CHANGES.md');
-    // Security — secret scanning lives entirely under the SECRETS capability
-    // (gitleaks, 800+ patterns). The 7-pattern grep fallback that used to
-    // live here was deleted in Phase 10e.C.7 along with the legacy
-    // `secretFindings` / `secretDetails` fields. When gitleaks is absent
-    // the report surfaces that fact through `toolsUnavailable` and the
-    // capability envelope is simply absent.
-    const evalCount = parseInt((0, runner_1.run)("grep -rnE '\\beval\\(' --include='*.ts' --include='*.js' --include='*.py' . 2>/dev/null | grep -v node_modules | grep -v dist | wc -l", cwd)) || 0;
+    const sourceFiles = sourceList.length;
+    const largestFiles = [...filteredFiles].sort((a, b) => b.lines - a.lines).slice(0, 10);
+    // ─── Console / debug / type-escape / eval counts (D074 closure) ───────────
+    // skipComments: true filters lines beginning with //, /*, or # so
+    // commented-out occurrences don't inflate the count.
+    //
+    // 2.4.7 D079 closure: `consoleLogCount` now routes through the shared
+    // `gatherDebugStatements` helper — same implementation in health AND
+    // quality, so the two reports cannot drift on this metric. Counts
+    // the print family across active languages (TS/JS/Py/Go).
+    const consoleLogCount = (0, debug_statements_1.gatherDebugStatements)(cwd).count;
+    // TypeScript escape-hatch count.
+    const tsFiles = (0, walk_source_files_1.walkSourceFiles)(cwd, {
+        extensions: ['.ts', '.tsx', '.js', '.jsx'],
+        includeTests: true,
+    });
+    // prettier-ignore
+    const anyTypeCount = (0, walk_source_files_1.countLineMatches)(cwd, tsFiles, [': any'], { skipComments: true }).lines; // slop-ok
+    // ─── Documentation ────────────────────────────────────────────────────────
+    // D026 (2.4.7): probe from repo root, not from cwd.
+    const readmeExists = (0, runner_1.fileExists)(repoRoot, 'README.md', 'readme.md');
+    const readmeLines = parseInt((0, runner_1.run)("wc -l README.md 2>/dev/null | awk '{print $1}'", repoRoot)) || 0;
+    // D027 (2.4.7): doc-comment regex + include flags derive from the
+    // language pack registry. countLineMatches mode='files' returns the
+    // file count. NO skipComments here — we explicitly WANT comment lines.
+    const docCommentPatterns = (0, languages_1.allDocCommentPatterns)();
+    const docCommentFiles = docCommentPatterns.length > 0
+        ? (0, walk_source_files_1.countLineMatches)(cwd, sourceList, docCommentPatterns, { mode: 'files' }).files
+        : 0;
+    const apiDocsExist = (0, runner_1.fileExists)(repoRoot, 'openapi.json', 'openapi.yaml', 'swagger.json', 'swagger.yaml');
+    const architectureDocsExist = (0, runner_1.fileExists)(repoRoot, 'ARCHITECTURE.md', 'docs/', 'ADR/', 'adr/');
+    const contributingExists = (0, runner_1.fileExists)(repoRoot, 'CONTRIBUTING.md');
+    const changelogExists = (0, runner_1.fileExists)(repoRoot, 'CHANGELOG.md', 'CHANGES.md');
+    // ─── Security (eval + TLS-bypass + cert/key files) ────────────────────────
+    // D056 (2.4.7): routed through the canonical counter so .dxkit-ignore /
+    // .gitignore / bundled defaults all apply. D074 (2.4.7): skipComments
+    // strips commented-out `eval(` and TLS-bypass idioms.
+    const evalFiles = (0, walk_source_files_1.walkSourceFiles)(cwd, {
+        extensions: ['.ts', '.tsx', '.js', '.jsx', '.py'],
+        includeTests: true,
+    });
+    const evalCount = (0, walk_source_files_1.countLineMatches)(cwd, evalFiles, ['\\beval\\('], {
+        skipComments: true,
+    }).lines;
     const privateKeyFiles = (0, runner_1.countLines)(`find . \\( -name "*.key" -o -name "*.pem" \\) ${EXCLUDE} 2>/dev/null`, cwd);
     const envFilesInGit = (0, runner_1.countLines)('git ls-files .env .env.* 2>/dev/null', cwd);
-    const tlsDisabledCount = parseInt((0, runner_1.run)("grep -rnE 'NODE_TLS_REJECT_UNAUTHORIZED.*0|rejectUnauthorized.*false|VERIFY_SSL.*false' --include='*.ts' --include='*.js' --include='*.py' . 2>/dev/null | grep -v node_modules | wc -l", cwd)) || 0;
-    // Maintainability
-    const controllers = (0, runner_1.countLines)(`find . \\( -path "*/controllers/*" -name "*.ts" -o -path "*/handlers/*" -name "*.go" -o -path "*/views/*" -name "*.py" \\) ${EXCLUDE} 2>/dev/null`, cwd);
-    const models = (0, runner_1.countLines)(`find . -path "*/models/*" -type f ${SOURCE_EXTS} ${EXCLUDE} 2>/dev/null`, cwd);
+    // D034 (2.4.7): TLS-bypass detection derives from the pack registry.
+    // D074 (2.4.7): skipComments closes the "vuln-scan rendered a
+    // `// NODE_TLS_REJECT_UNAUTHORIZED=0` comment as a HIGH finding"
+    // false-positive class on platform.
+    const tlsBypassPatterns = (0, languages_1.allTlsBypassPatterns)();
+    const tlsDisabledCount = tlsBypassPatterns.length > 0
+        ? (0, walk_source_files_1.countLineMatches)(cwd, sourceList, tlsBypassPatterns, { skipComments: true }).lines
+        : 0;
+    // ─── Maintainability (per-pack architectural counts) ───────────────────────
+    // Primary-component, route-handler, and data-model counts derive
+    // from the active language packs' `architecturalShape`. Pre-extension
+    // these were three hardcoded find commands keyed on backend-centric
+    // paths (`controllers/`, `handlers/`, `views/`, `models/`), so a pure
+    // React frontend or a .NET WinForms desktop app reported zero in all
+    // three counters regardless of how much primary architecture sat on
+    // disk. The walker visit already enumerated every source file; here
+    // we filter `sourceList` (pre-walked + autogen-excluded + exclusion-
+    // honoured) by case-insensitive substring match against the unioned
+    // pack contributions.
+    const flags = languageFlags ?? {};
+    const primaryPaths = (0, languages_1.allPrimaryComponentPaths)(flags).map((p) => p.toLowerCase());
+    const routePaths = (0, languages_1.allRoutePaths)(flags).map((p) => p.toLowerCase());
+    const modelPaths = (0, languages_1.allModelPaths)(flags).map((p) => p.toLowerCase());
+    const matchesAny = (p, needles) => {
+        if (needles.length === 0)
+            return false;
+        const lower = p.toLowerCase();
+        for (const n of needles) {
+            if (lower.includes(n))
+                return true;
+        }
+        return false;
+    };
+    let controllers = 0;
+    let routeHandlerFiles = 0;
+    let models = 0;
+    for (const rel of sourceList) {
+        // Match against the path with a leading slash so substring patterns
+        // like "/controllers/" anchor on a directory boundary, never on a
+        // filename like "controllers-helper.ts" floating outside such a dir.
+        const anchored = '/' + rel;
+        if (matchesAny(anchored, primaryPaths))
+            controllers++;
+        if (matchesAny(anchored, routePaths))
+            routeHandlerFiles++;
+        if (matchesAny(anchored, modelPaths))
+            models++;
+    }
     const directories = (0, runner_1.countLines)(`find . -type d ${EXCLUDE} 2>/dev/null`, cwd);
-    // Developer Experience
-    const ciConfigCount = (0, runner_1.countLines)('find .github/workflows -name "*.yml" -o -name "*.yaml" 2>/dev/null; ls .gitlab-ci.yml Jenkinsfile .circleci/config.yml 2>/dev/null', cwd);
-    const dockerConfigCount = (0, runner_1.countLines)('ls Dockerfile docker-compose.yml docker-compose.yaml .devcontainer/devcontainer.json 2>/dev/null', cwd);
-    const precommitConfigCount = (0, runner_1.countLines)('ls -d .husky .pre-commit-config.yaml .git/hooks/pre-commit 2>/dev/null', cwd);
-    const makefileExists = (0, runner_1.fileExists)(cwd, 'Makefile', 'justfile', 'Taskfile.yml');
-    const envExampleExists = (0, runner_1.fileExists)(cwd, '.env.example', '.env.sample', '.env.template');
-    // Coverage config
-    const coverageConfigExists = (0, runner_1.fileExists)(cwd, '.nycrc', '.nycrc.json', '.c8rc', '.c8rc.json', 'jest.config.js', 'jest.config.ts', 'vitest.config.ts', 'vitest.config.js', '.coveragerc', 'setup.cfg', 'pytest.ini');
+    // ─── Developer Experience (repo-root scoped) ──────────────────────────────
+    const ciConfigCount = (0, runner_1.countLines)('find .github/workflows -name "*.yml" -o -name "*.yaml" 2>/dev/null; ls .gitlab-ci.yml Jenkinsfile .circleci/config.yml 2>/dev/null', repoRoot);
+    const dockerConfigCount = (0, runner_1.countLines)('ls Dockerfile docker-compose.yml docker-compose.yaml .devcontainer/devcontainer.json 2>/dev/null', repoRoot);
+    const precommitConfigCount = (0, runner_1.countLines)('ls -d .husky .pre-commit-config.yaml .git/hooks/pre-commit 2>/dev/null', repoRoot);
+    const makefileExists = (0, runner_1.fileExists)(repoRoot, 'Makefile', 'justfile', 'Taskfile.yml');
+    const envExampleExists = (0, runner_1.fileExists)(repoRoot, '.env.example', '.env.sample', '.env.template');
+    const coverageConfigExists = (0, runner_1.fileExists)(repoRoot, '.nycrc', '.nycrc.json', '.c8rc', '.c8rc.json', 'jest.config.js', 'jest.config.ts', 'vitest.config.ts', 'vitest.config.js', '.coveragerc', 'setup.cfg', 'pytest.ini');
     return {
         sourceFiles,
-        testFiles: testFiles + testDirFiles,
+        testFiles: testList.length,
         totalLines,
         coverageConfigExists,
         filesOver500Lines,
         largestFileLines,
         largestFilePath,
+        largestFiles,
         consoleLogCount,
         anyTypeCount,
         readmeExists,
@@ -180,6 +276,7 @@ function gatherGenericMetrics(cwd) {
         tlsDisabledCount,
         controllers,
         models,
+        routeHandlerFiles,
         directories,
         ciConfigCount,
         dockerConfigCount,