autoremediator 0.21.2 → 0.22.0

package/dist/api/diet/analyze.js

@@ -0,0 +1,214 @@
+import { existsSync } from "node:fs";
+import { join, relative, resolve } from "node:path";
+import { detectPackageManager } from "../../platform/package-manager/index.js";
+import { findWorkspacePackages, findWorkspaceRoot } from "../../platform/workspace.js";
+import { analyzeDuplicates, dependencyDepths } from "./duplicates.js";
+import { readLockfile } from "./lockfile.js";
+import { findReplaceable, readNodeRequirement } from "./replaceable.js";
+import { emptyUsage, scanPackage, tokensOf } from "./scan.js";
+import { attackSurface, inspectInstalled } from "./surface.js";
+import { classifyDependencies, indexTokens, manifestConfigText, readManifest, scriptTexts, SECTIONS, } from "./unused.js";
+function declaredNames(manifest) {
+    return SECTIONS.flatMap((section) => Object.keys(manifest[section] ?? {}));
+}
+/** Add the manifest's own scripts and tool sections to a package's tokens. */
+function addManifestTokens(usage, manifest) {
+    for (const [label, text] of scriptTexts(manifest)) {
+        for (const token of tokensOf(text))
+            if (!usage.tokens.has(token))
+                usage.tokens.set(token, label);
+    }
+    for (const token of tokensOf(manifestConfigText(manifest))) {
+        if (!usage.tokens.has(token))
+            usage.tokens.set(token, "package.json");
+    }
+}
+/**
+ * Report what a project could shed: dependencies nothing uses, micro-packages the platform now
+ * covers, duplicate installed versions, and a score for how much code the dependency tree adds.
+ * Reads the project, its lockfile and its installed packages; changes nothing and needs no network.
+ */
+export async function analyzeDependencies(options = {}) {
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const rootManifest = readManifest(join(cwd, "package.json"));
+    if (!rootManifest)
+        throw new Error(`No readable package.json in ${cwd}. Run this in a Node.js project.`);
+    const workspaceRoot = findWorkspaceRoot(cwd);
+    const root = workspaceRoot ?? cwd;
+    const notes = [];
+    // The package at `cwd`, plus every workspace package when `cwd` is the workspace root.
+    const targets = [{ name: rootManifest.name ?? ".", dir: cwd, manifest: rootManifest }];
+    if (workspaceRoot && resolve(workspaceRoot) === cwd) {
+        for (const member of findWorkspacePackages(cwd)) {
+            targets.push({ name: member.name, dir: member.absoluteDir, manifest: member.manifest });
+        }
+    }
+    const isWorkspace = targets.length > 1;
+    const workspaceManifest = workspaceRoot
+        ? readManifest(join(workspaceRoot, "package.json"))
+        : undefined;
+    const interesting = new Set(targets.flatMap((target) => declaredNames(target.manifest)));
+    const memberDirectories = new Set(targets.slice(1).map((target) => target.dir));
+    const scans = new Map();
+    for (const target of targets) {
+        const excludeDirectories = target === targets[0] ? memberDirectories : new Set();
+        const { usage, files } = scanPackage(target.dir, interesting, { excludeDirectories, gitignoreRoots: [root] }, emptyUsage());
+        addManifestTokens(usage, target.manifest);
+        scans.set(target.dir, {
+            usage,
+            index: indexTokens(usage.tokens),
+            hasTypeScript: files.files.some((file) => /\.(c|m)?tsx?$/.test(file.path)),
+            hasTsconfig: files.files.some((file) => /^tsconfig[\w.-]*\.json$/.test(file.path)) ||
+                existsSync(join(target.dir, "tsconfig.json")),
+        });
+    }
+    const rootScan = scans.get(cwd);
+    const reports = [];
+    for (const target of targets) {
+        const scan = scans.get(target.dir);
+        const isRootOfWorkspace = isWorkspace && target === targets[0];
+        // Other packages of the workspace: the root's dependencies are usually used from a member, and
+        // a member is covered by the root's scripts and configuration.
+        const elsewhere = isRootOfWorkspace
+            ? targets.slice(1).map((member) => ({
+                usage: scans.get(member.dir).usage,
+                index: scans.get(member.dir).index,
+                packageName: member.name,
+            }))
+            : isWorkspace
+                ? [
+                    {
+                        usage: emptyUsage(),
+                        index: rootScan.index,
+                        packageName: `${rootManifest.name ?? "the workspace root"} (root scripts and configuration)`,
+                    },
+                ]
+                : undefined;
+        const classified = classifyDependencies({
+            packageDir: target.dir,
+            stopAt: root,
+            manifest: target.manifest,
+            usage: scan.usage,
+            index: scan.index,
+            ...(elsewhere ? { elsewhere } : {}),
+            hasTypeScript: scan.hasTypeScript || (isWorkspace && !isRootOfWorkspace && rootScan.hasTypeScript),
+            hasTsconfig: scan.hasTsconfig || (isWorkspace && !isRootOfWorkspace && rootScan.hasTsconfig),
+        });
+        const unusedNames = new Set(classified.unused
+            .filter((entry) => entry.classification !== "used-indirectly")
+            .map((entry) => entry.name));
+        const allDeclared = SECTIONS.flatMap((section) => Object.entries(target.manifest[section] ?? {}).map(([name, range]) => ({
+            name,
+            section,
+            range,
+        })));
+        const declared = allDeclared.filter((entry) => !unusedNames.has(entry.name));
+        const requirement = readNodeRequirement([
+            { dir: target.dir, manifest: target.manifest },
+            ...(workspaceRoot && workspaceManifest && target.dir !== workspaceRoot
+                ? [{ dir: workspaceRoot, manifest: workspaceManifest }]
+                : []),
+        ], root);
+        const replaceable = findReplaceable(declared, requirement, (name) => {
+            const reference = scan.usage.references.get(name);
+            if (reference)
+                return reference.symbols;
+            return scan.usage.mentions.has(name) ? new Set(["*"]) : undefined;
+        });
+        const count = (classification) => classified.unused.filter((entry) => entry.classification === classification).length;
+        reports.push({
+            name: target.name,
+            dir: relative(root, target.dir) || ".",
+            manifestPath: relative(root, join(target.dir, "package.json")) || "package.json",
+            ...(requirement ? { node: requirement } : {}),
+            counts: {
+                declared: new Set(allDeclared.map((entry) => entry.name)).size,
+                used: classified.used.length,
+                certainlyUnused: count("certainly-unused"),
+                probablyUnused: count("probably-unused"),
+                usedIndirectly: count("used-indirectly"),
+                replaceable: replaceable.filter((entry) => entry.status === "replaceable").length,
+            },
+            unused: classified.unused,
+            replaceable,
+            scan: {
+                sourceFiles: scan.usage.sourceFiles,
+                configFiles: scan.usage.configFiles,
+                dynamicLoadFiles: scan.usage.dynamicLoadFiles,
+                unparsedFiles: scan.usage.unparsedFiles,
+                dependenciesInstalled: classified.dependenciesInstalled,
+            },
+        });
+    }
+    for (const report of reports) {
+        if (!report.scan.dependenciesInstalled && report.counts.declared > 0) {
+            notes.push(`${report.name}: dependencies are not installed, so commands and peer links could not be read and nothing is classified certainly-unused. Install, then run again.`);
+        }
+    }
+    // Lockfile: duplicates, depth, install scripts.
+    const lock = readLockfile(root);
+    let duplicates;
+    let installedPackages = 0;
+    let maxDepth = 0;
+    let directDependencies = reports.reduce((total, report) => total + report.counts.declared, 0);
+    let installed = {
+        installScriptPackages: [],
+        deprecatedPackages: [],
+        manifestsRead: 0,
+    };
+    if (lock.result.graph) {
+        const graph = lock.result.graph;
+        duplicates = analyzeDuplicates(graph);
+        installedPackages = graph.nodes.size;
+        const depths = dependencyDepths(graph);
+        maxDepth = depths.maxDepth;
+        directDependencies = depths.directDependencies || directDependencies;
+        installed = inspectInstalled(graph);
+    }
+    else {
+        duplicates = { supported: false, note: lock.result.unsupported, packages: [], extraCopies: 0 };
+        notes.push(`Lockfile: ${lock.result.unsupported ?? "none"}.`);
+    }
+    const total = (pick) => reports.reduce((sum, report) => sum + pick(report), 0);
+    const certainlyUnused = total((report) => report.counts.certainlyUnused);
+    const probablyUnused = total((report) => report.counts.probablyUnused);
+    const replaceableCount = total((report) => report.counts.replaceable);
+    const surface = attackSurface({
+        installedPackages,
+        directDependencies,
+        maxDepth,
+        installScriptPackages: installed.installScriptPackages,
+        deprecatedPackages: installed.deprecatedPackages,
+        manifestsRead: installed.manifestsRead,
+        certainlyUnused,
+        probablyUnused,
+        replaceable: replaceableCount,
+        extraCopies: duplicates.extraCopies,
+        ...(lock.result.graph ? {} : { lockfileNote: lock.result.unsupported ?? "no lockfile" }),
+        installedMissing: lock.result.graph !== undefined && installed.manifestsRead < installedPackages,
+    });
+    return {
+        schemaVersion: "1",
+        cwd,
+        root,
+        packageManager: detectPackageManager(root),
+        ...(lock.file
+            ? { lockfile: { path: lock.file, format: lock.result.graph?.format ?? "unsupported" } }
+            : {}),
+        generatedAt: new Date().toISOString(),
+        packages: reports,
+        duplicates,
+        attackSurface: surface,
+        summary: {
+            packages: reports.length,
+            certainlyUnused,
+            probablyUnused,
+            usedIndirectly: total((report) => report.counts.usedIndirectly),
+            replaceable: replaceableCount,
+            duplicatedPackages: duplicates.packages.length,
+            score: surface.score,
+        },
+        notes,
+    };
+}
+//# sourceMappingURL=analyze.js.map

package/dist/api/diet/analyze.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../../../src/api/diet/analyze.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAqB,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAO/D,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACX,QAAQ,GAGT,MAAM,aAAa,CAAC;AAQrB,SAAS,aAAa,CAAC,QAAkB;IACvC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,KAAmB,EAAE,QAAkB;IAChE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAO,GAA+B,EAAE;IAExC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,YAAY;QACf,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,kCAAkC,CAAC,CAAC;IAExF,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,aAAa,IAAI,GAAG,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,uFAAuF;IACvF,MAAM,OAAO,GAAa,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,IAAI,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACpD,KAAK,MAAM,MAAM,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACvC,MAAM,iBAAiB,GAAG,aAAa;QACrC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhF,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,kBAAkB,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QACzF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,WAAW,CAClC,MAAM,CAAC,GAAG,EACV,WAAW,EACX,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE,EAC9C,UAAU,EAAE,CACb,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACpB,KAAK;YACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,WAAW,EACT,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAEjC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC;QACpC,MAAM,iBAAiB,GAAG,WAAW,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;QAE/D,+FAA+F;QAC/F,+DAA+D;QAC/D,MAAM,SAAS,GAAG,iBAAiB;YACjC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,KAAK;gBACnC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,KAAK;gBACnC,WAAW,EAAE,MAAM,CAAC,IAAI;aACzB,CAAC,CAAC;YACL,CAAC,CAAC,WAAW;gBACX,CAAC,CAAC;oBACE;wBACE,KAAK,EAAE,UAAU,EAAE;wBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,WAAW,EAAE,GAAG,YAAY,CAAC,IAAI,IAAI,oBAAoB,mCAAmC;qBAC7F;iBACF;gBACH,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,UAAU,GAAG,oBAAoB,CAAC;YACtC,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,aAAa,EACX,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC,aAAa,CAAC;YACrF,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,IAAI,QAAQ,CAAC,WAAW,CAAC;SAC7F,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,UAAU,CAAC,MAAM;aACd,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,iBAAiB,CAAC;aAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9B,CAAC;QACF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrE,IAAI;YACJ,OAAO;YACP,KAAK;SACN,CAAC,CAAC,CACJ,CAAC;QACF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAE7E,MAAM,WAAW,GAAG,mBAAmB,CACrC;YACE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC9C,GAAG,CAAC,aAAa,IAAI,iBAAiB,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa;gBACpE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;gBACvD,CAAC,CAAC,EAAE,CAAC;SACR,EACD,IAAI,CACL,CAAC;QACF,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC,OAAO,CAAC;YACxC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,CAAC,cAAsB,EAAE,EAAE,CACvC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG;YACtC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,cAAc;YAChF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,EAAE;gBACN,QAAQ,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBAC9D,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBAC5B,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC;gBAC1C,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC;gBACxC,cAAc,EAAE,KAAK,CAAC,iBAAiB,CAAC;gBACxC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM;aAClF;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,WAAW;YACX,IAAI,EAAE;gBACJ,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;gBACnC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;gBACnC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB;gBAC7C,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;gBACvC,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;aACxD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrE,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,IAAI,qJAAqJ,CACpK,CAAC;QACJ,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,UAA4B,CAAC;IACjC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9F,IAAI,SAAS,GAAG;QACd,qBAAqB,EAAE,EAAc;QACrC,kBAAkB,EAAE,EAAc;QAClC,aAAa,EAAE,CAAC;KACjB,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAChC,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,iBAAiB,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,IAAI,kBAAkB,CAAC;QACrE,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,GAAG,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,IAA2C,EAAE,EAAE,CAC5D,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,iBAAiB;QACjB,kBAAkB;QAClB,QAAQ;QACR,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;QACtD,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,eAAe;QACf,cAAc;QACd,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,aAAa,EAAE,CAAC;QACxF,gBAAgB,EACd,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,aAAa,GAAG,iBAAiB;KACjF,CAAC,CAAC;IAEH,OAAO;QACL,aAAa,EAAE,GAAG;QAClB,GAAG;QACH,IAAI;QACJ,cAAc,EAAE,oBAAoB,CAAC,IAAI,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,IAAI;YACX,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,aAAa,EAAE,EAAE;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,QAAQ,EAAE,OAAO;QACjB,UAAU;QACV,aAAa,EAAE,OAAO;QACtB,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO,CAAC,MAAM;YACxB,eAAe;YACf,cAAc;YACd,cAAc,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;YAC/D,WAAW,EAAE,gBAAgB;YAC7B,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;YAC9C,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;QACD,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/api/diet/apply.d.ts

@@ -0,0 +1,31 @@
+import type { PackageManager } from "../../platform/types.js";
+import type { VerificationResult, VerifyRequest } from "../../remediation/verify/types.js";
+import type { DietApplyResult, RemoveUnusedDependenciesOptions } from "./types.js";
+/** What changes the project or runs the package manager, replaceable in tests. */
+export interface DietDeps {
+    /** Remove these dependencies from one package of the project through the package manager. */
+    remove(request: {
+        root: string;
+        packageManager: PackageManager;
+        dir: string;
+        names: string[];
+        workspace: boolean;
+    }): Promise<void>;
+    /** Install exactly what the (restored) lockfile says. */
+    reinstall(request: {
+        root: string;
+        packageManager: PackageManager;
+    }): Promise<void>;
+    verify(request: VerifyRequest): Promise<VerificationResult>;
+}
+export declare function removeCommand(packageManager: PackageManager, dir: string, names: readonly string[], workspace: boolean): string[];
+export declare const defaultDietDeps: DietDeps;
+/**
+ * Remove the dependencies the analysis calls `certainly-unused` through the package manager, then
+ * judge the result with the verifier (scope, policy, a frozen install, and the project's type
+ * check and tests when asked) and put everything back if any check fails. Never touches
+ * `probably-unused` dependencies, replaceable packages or duplicates.
+ */
+export declare function removeUnusedDependenciesWith(options: RemoveUnusedDependenciesOptions, deps: DietDeps): Promise<DietApplyResult>;
+export declare function removeUnusedDependencies(options?: RemoveUnusedDependenciesOptions): Promise<DietApplyResult>;
+//# sourceMappingURL=apply.d.ts.map

package/dist/api/diet/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/api/diet/apply.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAI3F,OAAO,KAAK,EACV,eAAe,EAGf,+BAA+B,EAChC,MAAM,YAAY,CAAC;AAEpB,kFAAkF;AAClF,MAAM,WAAW,QAAQ;IACvB,6FAA6F;IAC7F,MAAM,CAAC,OAAO,EAAE;QACd,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,cAAc,CAAC;QAC/B,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,SAAS,EAAE,OAAO,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,yDAAyD;IACzD,SAAS,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,cAAc,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7D;AAOD,wBAAgB,aAAa,CAC3B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,SAAS,EAAE,OAAO,GACjB,MAAM,EAAE,CA6BV;AAED,eAAO,MAAM,eAAe,EAAE,QAqB7B,CAAC;AAuBF;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,+BAA+B,EACxC,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,eAAe,CAAC,CAgG1B;AAED,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,OAAO,CAAC,eAAe,CAAC,CAE1B"}

package/dist/api/diet/apply.js

@@ -0,0 +1,175 @@
+import { detectPackageManager, resolveInstallCommand, } from "../../platform/package-manager/index.js";
+import { withRepoLock } from "../../platform/repo-lock.js";
+import { createProjectSnapshot, restoreProjectSnapshot } from "../../platform/rollback.js";
+import { safeExeca } from "../../platform/safe-exec.js";
+import { LONG_RUNNING_TIMEOUT_MS } from "../../platform/timeouts.js";
+import { verify } from "../../remediation/verify/verifier.js";
+import { assertAutonomyAllows } from "../autonomy/index.js";
+import { analyzeDependencies } from "./analyze.js";
+const SUPPORTED = new Set(["npm", "pnpm"]);
+/** The command that removes `names` from the package at `dir` (`.` for the workspace root or a single project). */
+const PACKAGE_NAME = /^(?:@[a-z0-9~][a-z0-9._~-]*\/)?[a-z0-9~][a-z0-9._~-]*$/;
+export function removeCommand(packageManager, dir, names, workspace) {
+    // Names come from package.json keys; one that looks like an option must never reach the package manager.
+    for (const name of names) {
+        if (!PACKAGE_NAME.test(name))
+            throw new Error(`Refusing to remove "${name.slice(0, 60)}": not a valid package name.`);
+    }
+    if (packageManager === "pnpm") {
+        // `--ignore-scripts`: removing a package must not run anyone's lifecycle scripts.
+        return dir === "."
+            ? [
+                "pnpm",
+                "remove",
+                ...(workspace ? ["--workspace-root"] : []),
+                "--ignore-scripts",
+                "--",
+                ...names,
+            ]
+            : ["pnpm", "--filter", `./${dir}`, "remove", "--ignore-scripts", "--", ...names];
+    }
+    return [
+        "npm",
+        "uninstall",
+        "--ignore-scripts",
+        "--no-audit",
+        "--no-fund",
+        ...(dir === "." ? [] : ["--workspace", dir]),
+        "--",
+        ...names,
+    ];
+}
+export const defaultDietDeps = {
+    async remove({ root, packageManager, dir, names, workspace }) {
+        const [command, ...args] = removeCommand(packageManager, dir, names, workspace);
+        await safeExeca(command, args, {
+            cwd: root,
+            stdio: "pipe",
+            timeoutMs: LONG_RUNNING_TIMEOUT_MS,
+        });
+    },
+    async reinstall({ root, packageManager }) {
+        const [command, ...args] = resolveInstallCommand(packageManager, {
+            enforceFrozenLockfile: true,
+        });
+        if (command)
+            await safeExeca(command, args, {
+                cwd: root,
+                stdio: "pipe",
+                timeoutMs: LONG_RUNNING_TIMEOUT_MS,
+            });
+    },
+    verify,
+};
+function certainRemovals(packages) {
+    const removals = [];
+    const byDirectory = new Map();
+    for (const report of packages) {
+        for (const entry of report.unused) {
+            if (entry.classification !== "certainly-unused")
+                continue;
+            removals.push({
+                dir: report.dir,
+                name: entry.name,
+                section: entry.section,
+                range: entry.range,
+            });
+            byDirectory.set(report.dir, [...(byDirectory.get(report.dir) ?? []), entry.name]);
+        }
+    }
+    return { removals, byDirectory };
+}
+/**
+ * Remove the dependencies the analysis calls `certainly-unused` through the package manager, then
+ * judge the result with the verifier (scope, policy, a frozen install, and the project's type
+ * check and tests when asked) and put everything back if any check fails. Never touches
+ * `probably-unused` dependencies, replaceable packages or duplicates.
+ */
+export async function removeUnusedDependenciesWith(options, deps) {
+    // Earned autonomy: removing dependencies changes the project, so it is gated like any other apply.
+    assertAutonomyAllows(options.cwd ?? process.cwd(), options.policy, "apply", "removeUnusedDependencies");
+    const report = await analyzeDependencies({ cwd: options.cwd });
+    const { removals, byDirectory } = certainRemovals(report.packages);
+    if (removals.length === 0) {
+        return {
+            status: "nothing-to-remove",
+            removals,
+            message: "No dependency is certainly unused, so nothing was removed.",
+            report,
+        };
+    }
+    const packageManager = options.packageManager ?? detectPackageManager(report.root);
+    if (!SUPPORTED.has(packageManager)) {
+        throw new Error(`Removing dependencies automatically supports npm and pnpm, and this project uses ${packageManager}. Remove by hand: ${removals.map((removal) => `${removal.name} (${removal.dir})`).join(", ")}.`);
+    }
+    return withRepoLock(report.root, async () => {
+        const before = await createProjectSnapshot(report.root);
+        const undo = async () => {
+            await restoreProjectSnapshot(before);
+            return deps
+                .reinstall({ root: report.root, packageManager })
+                .then(() => undefined)
+                .catch((error) => (error instanceof Error ? error.message : String(error)));
+        };
+        try {
+            for (const [dir, names] of byDirectory) {
+                await deps.remove({
+                    root: report.root,
+                    packageManager,
+                    dir,
+                    names,
+                    workspace: report.packages.length > 1,
+                });
+            }
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            const reinstallProblem = await undo();
+            return {
+                status: "failed",
+                removals,
+                message: `The package manager could not remove the dependencies (${reason}). Manifests and lockfile were restored${reinstallProblem ? `, but reinstalling failed: ${reinstallProblem}` : ""}.`,
+                report,
+            };
+        }
+        const verification = await deps.verify({
+            cwd: report.root,
+            packageManager,
+            ...(options.policy ? { policy: options.policy } : {}),
+            baseFiles: before.fileSnapshots,
+            statusBefore: before.isGit ? (before.gitStatusBefore ?? []) : undefined,
+            advisories: [],
+            options: {
+                runTests: options.runTests ?? false,
+                typecheck: options.typecheck ?? true,
+                ...(options.constraints ? { constraints: options.constraints } : {}),
+            },
+            checks: ["scope", "policy", "install", "typecheck", "tests"],
+        });
+        if (!verification.passed) {
+            const failed = verification.checks.find((check) => check.name === verification.failedCheck);
+            const reinstallProblem = await undo();
+            return {
+                status: "rolled-back",
+                removals,
+                verification,
+                message: `Verification failed (${verification.failedCheck}): ${failed?.message ?? "see details"}. Nothing was removed${reinstallProblem ? `; reinstalling the restored lockfile failed: ${reinstallProblem}` : ""}.`,
+                report,
+            };
+        }
+        return {
+            status: "removed",
+            removals,
+            verification,
+            message: `Removed ${removals.length} unused ${removals.length === 1 ? "dependency" : "dependencies"}; verified by ${verification.checks
+                .filter((check) => check.status === "passed")
+                .map((check) => check.name)
+                .join(", ")}.`,
+            report,
+        };
+    });
+}
+export function removeUnusedDependencies(options = {}) {
+    return removeUnusedDependenciesWith(options, defaultDietDeps);
+}
+//# sourceMappingURL=apply.js.map

package/dist/api/diet/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../../src/api/diet/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAGrE,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAuBnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3D,mHAAmH;AACnH,MAAM,YAAY,GAAG,wDAAwD,CAAC;AAE9E,MAAM,UAAU,aAAa,CAC3B,cAA8B,EAC9B,GAAW,EACX,KAAwB,EACxB,SAAkB;IAElB,yGAAyG;IACzG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,kFAAkF;QAClF,OAAO,GAAG,KAAK,GAAG;YAChB,CAAC,CAAC;gBACE,MAAM;gBACN,QAAQ;gBACR,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,kBAAkB;gBAClB,IAAI;gBACJ,GAAG,KAAK;aACT;YACH,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,GAAG,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC;IACrF,CAAC;IACD,OAAO;QACL,KAAK;QACL,WAAW;QACX,kBAAkB;QAClB,YAAY;QACZ,WAAW;QACX,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI;QACJ,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE;QAC1D,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAChF,MAAM,SAAS,CAAC,OAAQ,EAAE,IAAI,EAAE;YAC9B,GAAG,EAAE,IAAI;YACT,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,uBAAuB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE;QACtC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,qBAAqB,CAAC,cAAc,EAAE;YAC/D,qBAAqB,EAAE,IAAI;SAC5B,CAAC,CAAC;QACH,IAAI,OAAO;YACT,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC7B,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,uBAAuB;aACnC,CAAC,CAAC;IACP,CAAC;IACD,MAAM;CACP,CAAC;AAEF,SAAS,eAAe,CAAC,QAAsC;IAI7D,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,cAAc,KAAK,kBAAkB;gBAAE,SAAS;YAC1D,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;YACH,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAwC,EACxC,IAAc;IAEd,mGAAmG;IACnG,oBAAoB,CAClB,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAC5B,OAAO,CAAC,MAAM,EACd,OAAO,EACP,0BAA0B,CAC3B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,mBAAmB;YAC3B,QAAQ;YACR,OAAO,EAAE,4DAA4D;YACrE,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,oFAAoF,cAAc,qBAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnM,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,GAAG,KAAK,IAAiC,EAAE;YACnD,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO,IAAI;iBACR,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;iBAChD,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACrB,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;gBACvC,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,cAAc;oBACd,GAAG;oBACH,KAAK;oBACL,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;iBACtC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,gBAAgB,GAAG,MAAM,IAAI,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,QAAQ;gBACR,OAAO,EAAE,0DAA0D,MAAM,0CAA0C,gBAAgB,CAAC,CAAC,CAAC,8BAA8B,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC9L,MAAM;aACP,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACrC,GAAG,EAAE,MAAM,CAAC,IAAI;YAChB,cAAc;YACd,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,SAAS,EAAE,MAAM,CAAC,aAAa;YAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACvE,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;gBACnC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBACpC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;SAC7D,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,WAAW,CAAC,CAAC;YAC5F,MAAM,gBAAgB,GAAG,MAAM,IAAI,EAAE,CAAC;YACtC,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,QAAQ;gBACR,YAAY;gBACZ,OAAO,EAAE,wBAAwB,YAAY,CAAC,WAAW,MAAM,MAAM,EAAE,OAAO,IAAI,aAAa,wBAAwB,gBAAgB,CAAC,CAAC,CAAC,gDAAgD,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;gBACpN,MAAM;aACP,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,YAAY;YACZ,OAAO,EAAE,WAAW,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,iBAAiB,YAAY,CAAC,MAAM;iBACpI,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;iBAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC1B,IAAI,CAAC,IAAI,CAAC,GAAG;YAChB,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAO,GAAoC,EAAE;IAE7C,OAAO,4BAA4B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AAChE,CAAC"}

package/dist/api/diet/duplicates.d.ts

@@ -0,0 +1,9 @@
+import type { LockGraph } from "./lockfile.js";
+import type { DuplicatesReport } from "./types.js";
+export declare function analyzeDuplicates(graph: LockGraph): DuplicatesReport;
+/** Shortest distance from the project to each installed package, in dependency hops. */
+export declare function dependencyDepths(graph: LockGraph): {
+    maxDepth: number;
+    directDependencies: number;
+};
+//# sourceMappingURL=duplicates.d.ts.map

package/dist/api/diet/duplicates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicates.d.ts","sourceRoot":"","sources":["../../../src/api/diet/duplicates.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EAGV,gBAAgB,EAGjB,MAAM,YAAY,CAAC;AAwBpB,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,CA0FpE;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAyBA"}

package/dist/api/diet/duplicates.js

@@ -0,0 +1,125 @@
+import semver from "semver";
+const usableRange = (range) => range !== undefined && semver.validRange(range) !== null;
+const highest = (versions) => versions.toSorted((left, right) => semver.rcompare(left, right))[0];
+function parentOf(graph, edge) {
+    if (edge.fromDirect)
+        return { name: edge.from, ...(edge.range ? { range: edge.range } : {}), direct: true };
+    const node = graph.nodes.get(edge.from);
+    return {
+        name: node?.name ?? edge.from,
+        ...(node ? { version: node.version } : {}),
+        ...(edge.range ? { range: edge.range } : {}),
+        direct: false,
+    };
+}
+/** Does every range admit `version`? */
+const acceptedBy = (version, ranges) => ranges.every((range) => semver.satisfies(version, range));
+export function analyzeDuplicates(graph) {
+    const byName = new Map();
+    for (const node of graph.nodes.values()) {
+        const versions = byName.get(node.name) ?? [];
+        versions.push(node.version);
+        byName.set(node.name, versions);
+    }
+    const requirers = new Map();
+    for (const edge of graph.edges) {
+        const list = requirers.get(edge.to) ?? [];
+        list.push(edge);
+        requirers.set(edge.to, list);
+    }
+    const packages = [];
+    for (const [name, versions] of byName) {
+        if (versions.length < 2)
+            continue;
+        const sorted = versions.toSorted((left, right) => semver.valid(left) && semver.valid(right)
+            ? semver.rcompare(left, right)
+            : right.localeCompare(left));
+        const entries = sorted.map((version) => {
+            const edges = requirers.get(`${name}@${version}`) ?? [];
+            const parents = edges
+                .map((edge) => parentOf(graph, edge))
+                .toSorted((left, right) => left.name.localeCompare(right.name) ||
+                (left.version ?? "").localeCompare(right.version ?? ""));
+            const ranges = edges.map((edge) => edge.range);
+            let movableTo;
+            if (edges.length > 0 && ranges.every((range) => usableRange(range))) {
+                // A dedupe moves a copy up to a newer one its parents already accept, never down.
+                movableTo = highest(sorted.filter((other) => semver.valid(other) &&
+                    semver.valid(version) &&
+                    semver.gt(other, version) &&
+                    acceptedBy(other, ranges)));
+            }
+            return { version, parents, ...(movableTo ? { movableTo } : {}) };
+        });
+        const allEdges = sorted.flatMap((version) => requirers.get(`${name}@${version}`) ?? []);
+        const allRanges = allEdges.map((edge) => edge.range);
+        const rangesKnown = allEdges.length > 0 && allRanges.every((range) => usableRange(range));
+        const unified = rangesKnown
+            ? highest(sorted.filter((version) => semver.valid(version) && acceptedBy(version, allRanges)))
+            : undefined;
+        let verdict;
+        let summary;
+        const moved = entries.filter((entry) => entry.movableTo);
+        if (!rangesKnown) {
+            verdict = "unknown-ranges";
+            summary = `${sorted.length} versions; the ranges its parents ask for are not on record (install dependencies so they can be read), so a dedupe cannot be judged`;
+        }
+        else if (unified) {
+            verdict = "dedupe-within-range";
+            summary = `${sorted.length} versions, but every parent accepts ${unified}: a dedupe or an override to it stays within every range`;
+        }
+        else if (moved.length > 0) {
+            verdict = "partly-dedupable";
+            summary = `${sorted.length} versions; ${moved.length} can move to a version their parents already accept, the rest are held by a parent whose range excludes the others`;
+        }
+        else {
+            verdict = "needs-override-or-upgrade";
+            summary = `${sorted.length} versions, and each is held by a parent whose range excludes the others: collapsing them needs an override that leaves a parent's range, or upgrading the parent`;
+        }
+        packages.push({
+            name,
+            versions: entries,
+            verdict,
+            ...(unified ? { unifiedVersion: unified } : {}),
+            summary,
+        });
+    }
+    packages.sort((left, right) => right.versions.length - left.versions.length || left.name.localeCompare(right.name));
+    return {
+        supported: true,
+        packages,
+        extraCopies: packages.reduce((total, entry) => total + entry.versions.length - 1, 0),
+    };
+}
+/** Shortest distance from the project to each installed package, in dependency hops. */
+export function dependencyDepths(graph) {
+    const children = new Map();
+    const direct = new Set();
+    for (const edge of graph.edges) {
+        if (edge.fromDirect)
+            direct.add(edge.to);
+        else
+            children.set(edge.from, [...(children.get(edge.from) ?? []), edge.to]);
+    }
+    const depth = new Map();
+    let frontier = [...direct];
+    for (const id of frontier)
+        depth.set(id, 1);
+    let maxDepth = frontier.length > 0 ? 1 : 0;
+    while (frontier.length > 0) {
+        const next = [];
+        for (const id of frontier) {
+            for (const child of children.get(id) ?? []) {
+                if (depth.has(child))
+                    continue;
+                const level = (depth.get(id) ?? 0) + 1;
+                depth.set(child, level);
+                maxDepth = Math.max(maxDepth, level);
+                next.push(child);
+            }
+        }
+        frontier = next;
+    }
+    return { maxDepth, directDependencies: direct.size };
+}
+//# sourceMappingURL=duplicates.js.map

package/dist/api/diet/duplicates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplicates.js","sourceRoot":"","sources":["../../../src/api/diet/duplicates.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAW5B,MAAM,WAAW,GAAG,CAAC,KAAyB,EAAmB,EAAE,CACjE,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;AAE3D,MAAM,OAAO,GAAG,CAAC,QAA2B,EAAsB,EAAE,CAClE,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE,SAAS,QAAQ,CAAC,KAAgB,EAAE,IAAc;IAChD,IAAI,IAAI,CAAC,UAAU;QACjB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI;QAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,EAAE,KAAK;KACd,CAAC;AACJ,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,MAAyB,EAAW,EAAE,CACzE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5D,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;YAC9B,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAC9B,CAAC;QAEF,MAAM,OAAO,GAAuB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;YACzD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,KAAK;iBAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;iBACpC,QAAQ,CACP,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAC1D,CAAC;YACJ,MAAM,MAAM,GAA2B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,IAAI,SAA6B,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpE,kFAAkF;gBAClF,SAAS,GAAG,OAAO,CACjB,MAAM,CAAC,MAAM,CACX,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;oBACnB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;oBACrB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;oBACzB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAC5B,CACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,WAAW;YACzB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC9F,CAAC,CAAC,SAAS,CAAC;QAEd,IAAI,OAAyB,CAAC;QAC9B,IAAI,OAAe,CAAC;QACpB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,GAAG,gBAAgB,CAAC;YAC3B,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,sIAAsI,CAAC;QACnK,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,GAAG,qBAAqB,CAAC;YAChC,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,uCAAuC,OAAO,0DAA0D,CAAC;QACrI,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,GAAG,kBAAkB,CAAC;YAC7B,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,oHAAoH,CAAC;QAC3K,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,2BAA2B,CAAC;YACtC,OAAO,GAAG,GAAG,MAAM,CAAC,MAAM,kKAAkK,CAAC;QAC/L,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,QAAQ,EAAE,OAAO;YACjB,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,IAAI,CACX,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACtF,CAAC;IACF,OAAO;QACL,SAAS,EAAE,IAAI;QACf,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;KACrF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAI/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YACpC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,QAAQ;QAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5C,IAAI,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACxB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC"}

package/dist/api/diet/files.d.ts

@@ -0,0 +1,30 @@
+/** Files the AST scanner parses. */
+export declare const SOURCE_EXTENSIONS: Set<string>;
+export type FileRole = "source" | "template" | "config" | "script";
+export interface ScannedFile {
+    absolute: string;
+    /** Relative to the package directory, with forward slashes. */
+    path: string;
+    role: FileRole;
+    /** Config files that are also JavaScript or TypeScript are parsed as well as tokenised. */
+    parse: boolean;
+}
+export interface PackageFiles {
+    files: ScannedFile[];
+    /** Files too large to read. */
+    skipped: string[];
+}
+export declare function isConfigName(name: string): boolean;
+/**
+ * Everything in a package directory that can name a dependency: source, templates, tool
+ * configuration, CI and git hooks, scripts. Directories of other workspace packages are left to
+ * their own analysis. Generated-output directories are skipped only when .gitignore says they are
+ * not committed; otherwise they are scanned, because skipping real source would turn a used
+ * dependency into a false `certainly-unused`.
+ */
+export declare function collectPackageFiles(packageDir: string, options?: {
+    excludeDirectories?: ReadonlySet<string>;
+    gitignoreRoots?: readonly string[];
+}): PackageFiles;
+export declare function readText(file: string): string | undefined;
+//# sourceMappingURL=files.d.ts.map

package/dist/api/diet/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/api/diet/files.ts"],"names":[],"mappings":"AAGA,oCAAoC;AACpC,eAAO,MAAM,iBAAiB,aAS5B,CAAC;AA8DH,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEnE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,2FAA2F;IAC3F,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AA2BD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAqBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC7F,YAAY,CAkDd;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMzD"}