depvitals 0.1.2 → 0.2.0

package/dist/cli/notifier/versionCompare.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Pure version comparison for the optional CLI update notifier.
+ *
+ * The notifier may only point an interactive user at a strictly newer *stable* DepVitals release,
+ * so the ordering rule here is intentionally bounded to `major.minor.patch` with decimal digits.
+ * Full semver ordering (prerelease precedence such as `-rc.1` < `-rc.2`, numeric-vs-alphanumeric
+ * identifiers, build metadata significance) is deliberately **not** implemented: the update-notifier
+ * contract requires skipping the notification for such versions instead of inventing an unreliable
+ * comparison, so every prerelease or build-tagged version is rejected conservatively.
+ *
+ * The module is pure by design: no filesystem, no network, no environment, no cache, no output and
+ * no `semver` dependency. Untrusted strings are validated by strict pattern matching, never parsed
+ * leniently, and no input can make these functions throw.
+ *
+ * This helper performs no eligibility decision and activates nothing; callers (later notifier code)
+ * decide whether a lookup happened and whether the notice may be printed.
+ */
+/** A parsed stable version; tuple order is `major`, `minor`, `patch`. */
+type ParsedVersion = readonly [major: number, minor: number, patch: number];
+/**
+ * Parses an exact `major.minor.patch` string.
+ *
+ * Returns `undefined` for a `v` prefix, empty input, whitespace, missing or extra components
+ * (`0.2`, `1.2.3.4`), prerelease tags (`0.2.0-rc.1`), build metadata (`1.2.3+build.5`), partial
+ * tokens (`1.x.3`), leading zeros (`01.2.3`) and any other malformed metadata.
+ *
+ * Exported for the notifier's own consumers (Step 66 validates untrusted registry text with this
+ * single grammar) so exactly one place defines what "an exact stable DepVitals version" means.
+ */
+export declare function parseStableVersion(value: string): ParsedVersion | undefined;
+/**
+ * Reports whether a registry `latest` version is strictly newer than the installed DepVitals
+ * version, using numeric comparison in `major`, `minor`, `patch` order (never string ordering, so
+ * `0.2.10` is newer than `0.2.9`).
+ *
+ * Returns `false` — never a notification — when the versions are equal, when `latest` is older, or
+ * when either input is not an exact stable version. That includes a prerelease installed build
+ * (e.g. a local `0.2.0-rc.1`), which silently skips notification rather than relying on ordering
+ * this helper does not implement.
+ *
+ * @param current - The installed DepVitals CLI version; callers must validate untrusted strings
+ *   (for example registry JSON) before passing them here.
+ * @param latest - The `latest` dist-tag reported for the package.
+ * @returns `true` only for a strictly newer stable `latest`; `false` for everything else.
+ */
+export declare function isNewerStableVersion(current: string, latest: string): boolean;
+export {};
+//# sourceMappingURL=versionCompare.d.ts.map

package/dist/cli/notifier/versionCompare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"versionCompare.d.ts","sourceRoot":"","sources":["../../../src/cli/notifier/versionCompare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,yEAAyE;AACzE,KAAK,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAiB5E;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAgB3E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAoB7E"}

package/dist/cli/notifier/versionCompare.js

@@ -0,0 +1,89 @@
+/**
+ * Pure version comparison for the optional CLI update notifier.
+ *
+ * The notifier may only point an interactive user at a strictly newer *stable* DepVitals release,
+ * so the ordering rule here is intentionally bounded to `major.minor.patch` with decimal digits.
+ * Full semver ordering (prerelease precedence such as `-rc.1` < `-rc.2`, numeric-vs-alphanumeric
+ * identifiers, build metadata significance) is deliberately **not** implemented: the update-notifier
+ * contract requires skipping the notification for such versions instead of inventing an unreliable
+ * comparison, so every prerelease or build-tagged version is rejected conservatively.
+ *
+ * The module is pure by design: no filesystem, no network, no environment, no cache, no output and
+ * no `semver` dependency. Untrusted strings are validated by strict pattern matching, never parsed
+ * leniently, and no input can make these functions throw.
+ *
+ * This helper performs no eligibility decision and activates nothing; callers (later notifier code)
+ * decide whether a lookup happened and whether the notice may be printed.
+ */
+/**
+ * One strictly numeric version component: no sign, no whitespace, no exponent, no leading zeros
+ * (padding is ambiguous and is not part of how npm publishes stable versions).
+ */
+const COMPONENT = /^(?:0|[1-9][0-9]*)$/;
+/**
+ * Parses one numeric component, returning `undefined` when it is not strictly numeric or when its
+ * value is not a safe integer (absurdly large digit strings must never be compared by floating-point
+ * rounding).
+ */
+function parseComponent(value) {
+    if (value === undefined || !COMPONENT.test(value)) {
+        return undefined;
+    }
+    const parsed = Number.parseInt(value, 10);
+    return Number.isSafeInteger(parsed) ? parsed : undefined;
+}
+/**
+ * Parses an exact `major.minor.patch` string.
+ *
+ * Returns `undefined` for a `v` prefix, empty input, whitespace, missing or extra components
+ * (`0.2`, `1.2.3.4`), prerelease tags (`0.2.0-rc.1`), build metadata (`1.2.3+build.5`), partial
+ * tokens (`1.x.3`), leading zeros (`01.2.3`) and any other malformed metadata.
+ *
+ * Exported for the notifier's own consumers (Step 66 validates untrusted registry text with this
+ * single grammar) so exactly one place defines what "an exact stable DepVitals version" means.
+ */
+export function parseStableVersion(value) {
+    const parts = value.split('.');
+    if (parts.length !== 3) {
+        return undefined;
+    }
+    const major = parseComponent(parts[0]);
+    const minor = parseComponent(parts[1]);
+    const patch = parseComponent(parts[2]);
+    if (major === undefined || minor === undefined || patch === undefined) {
+        return undefined;
+    }
+    return [major, minor, patch];
+}
+/**
+ * Reports whether a registry `latest` version is strictly newer than the installed DepVitals
+ * version, using numeric comparison in `major`, `minor`, `patch` order (never string ordering, so
+ * `0.2.10` is newer than `0.2.9`).
+ *
+ * Returns `false` — never a notification — when the versions are equal, when `latest` is older, or
+ * when either input is not an exact stable version. That includes a prerelease installed build
+ * (e.g. a local `0.2.0-rc.1`), which silently skips notification rather than relying on ordering
+ * this helper does not implement.
+ *
+ * @param current - The installed DepVitals CLI version; callers must validate untrusted strings
+ *   (for example registry JSON) before passing them here.
+ * @param latest - The `latest` dist-tag reported for the package.
+ * @returns `true` only for a strictly newer stable `latest`; `false` for everything else.
+ */
+export function isNewerStableVersion(current, latest) {
+    const installed = parseStableVersion(current);
+    const published = parseStableVersion(latest);
+    if (installed === undefined || published === undefined) {
+        return false;
+    }
+    const [installedMajor, installedMinor, installedPatch] = installed;
+    const [publishedMajor, publishedMinor, publishedPatch] = published;
+    if (publishedMajor !== installedMajor) {
+        return publishedMajor > installedMajor;
+    }
+    if (publishedMinor !== installedMinor) {
+        return publishedMinor > installedMinor;
+    }
+    return publishedPatch > installedPatch;
+}
+//# sourceMappingURL=versionCompare.js.map

package/dist/cli/notifier/versionCompare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"versionCompare.js","sourceRoot":"","sources":["../../../src/cli/notifier/versionCompare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;GAGG;AACH,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAKxC;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAClE,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,SAAS,CAAC;IACnE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,SAAS,CAAC;IAEnE,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;IAED,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,cAAc,GAAG,cAAc,CAAC;IACzC,CAAC;IAED,OAAO,cAAc,GAAG,cAAc,CAAC;AACzC,CAAC"}

package/dist/cli/runCli.d.ts

@@ -7,6 +7,8 @@
  *
  * The responsibilities here are:
  * - delegate argument validation to the pure {@link parseCliArgs};
+ * - hand the configuration-only package names recognized in the project to the analyzer, which is
+ *   the only component allowed to turn evidence into an unused/missing category;
  * - run the static dependency scan with `analyzeProject`;
  * - render the report with the pure terminal reporter;
  * - decide the scan exit code from `hasDependencyIssues`, not from the report string;

package/dist/cli/runCli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runCli.d.ts","sourceRoot":"","sources":["../../src/cli/runCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAkBF;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAa7F"}
+{"version":3,"file":"runCli.d.ts","sourceRoot":"","sources":["../../src/cli/runCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAYH;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAkBF;;;;;;GAMG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAa7F"}

package/dist/cli/runCli.js

@@ -7,6 +7,8 @@
  *
  * The responsibilities here are:
  * - delegate argument validation to the pure {@link parseCliArgs};
+ * - hand the configuration-only package names recognized in the project to the analyzer, which is
+ *   the only component allowed to turn evidence into an unused/missing category;
  * - run the static dependency scan with `analyzeProject`;
  * - render the report with the pure terminal reporter;
  * - decide the scan exit code from `hasDependencyIssues`, not from the report string;
@@ -16,6 +18,9 @@
  * `src/core`, and the reporter stays in `src/reporters`.
  */
 import { AnalysisError, analyzeProject } from '../core/analyzeProject.js';
+import { findEslintManifestUsage } from '../detectors/eslintManifestConfig.js';
+import { EslintRcJsonError, findEslintRcJsonUsage } from '../detectors/eslintRcJsonConfig.js';
+import { findJestManifestUsage } from '../detectors/jestManifestConfig.js';
 import { formatTerminalReport, hasDependencyIssues } from '../reporters/terminalReporter.js';
 import { ProjectManifestError } from '../scanner/projectManifest.js';
 import { SourceFilesError } from '../scanner/sourceFiles.js';
@@ -65,7 +70,11 @@ export async function runCli(args, options) {
 async function runScan(projectPath) {
     let result;
     try {
-        result = await analyzeProject(projectPath);
+        // Legacy ESLint configuration contributes configuration-only names. They are passed through the
+        // analyzer's config handoff, which merges them into `usedNames` only, so they can suppress an
+        // unused finding and can never create a missing one.
+        const configUsedNames = await collectConfigUsedNames(projectPath);
+        result = await analyzeProject(projectPath, { configUsedNames });
     }
     catch (error) {
         if (isOperationalError(error)) {
@@ -80,14 +89,32 @@ async function runScan(projectPath) {
     const hasIssues = hasDependencyIssues(result);
     return { exitCode: hasIssues ? 1 : 0, stdout: formatTerminalReport(result), stderr: '' };
 }
+/**
+ * Collect the configuration-only package names of one project.
+ *
+ * Both legacy ESLint sources share one precedence computation: a hard barrier disables both, and
+ * otherwise `.eslintrc.json` wins over the `package.json#eslintConfig` block, so the two readers are
+ * mutually exclusive and the union never combines contradictory configuration. The `package.json#jest`
+ * reader is independent of the ESLint rules but obeys the same style of guard, producing nothing once
+ * a root `jest.config.*` file exists. The analyzer re-validates and sorts the merged hints, so no
+ * ordering is imposed here.
+ */
+async function collectConfigUsedNames(projectPath) {
+    const manifestNames = await findEslintManifestUsage(projectPath);
+    const eslintRcJsonNames = await findEslintRcJsonUsage(projectPath);
+    const jestNames = await findJestManifestUsage(projectPath);
+    return new Set([...manifestNames, ...eslintRcJsonNames, ...jestNames]);
+}
 /**
  * Whether the thrown value is a scanner error the CLI knows how to render. Only the existing typed
- * error classes count; everything else is treated as an unexpected internal failure.
+ * error classes plus the unusable-`.eslintrc.json` error count; everything else is treated as an
+ * unexpected internal failure.
  */
 function isOperationalError(error) {
     return (error instanceof ProjectManifestError ||
         error instanceof SourceFilesError ||
-        error instanceof AnalysisError);
+        error instanceof AnalysisError ||
+        error instanceof EslintRcJsonError);
 }
 /**
  * The fallback message for an unexpected thrown value. The path is always included so the failure

package/dist/cli/runCli.js.map

@@ -1 +1 @@
-{"version":3,"file":"runCli.js","sourceRoot":"","sources":["../../src/cli/runCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAuB,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAsBjD,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,EAAE;IACF,uEAAuE;IACvE,EAAE;IACF,QAAQ;IACR,uBAAuB;IACvB,EAAE;IACF,YAAY;IACZ,8EAA8E;IAC9E,EAAE;IACF,UAAU;IACV,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAuB,EAAE,OAAmB;IACvE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrE,KAAK,OAAO;YACV,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrE,KAAK,MAAM;YACT,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CAAC,WAAmB;IACxC,IAAI,MAAsB,CAAC;IAE3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACnE,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CACzB,KAAc;IAEd,OAAO,CACL,KAAK,YAAY,oBAAoB;QACrC,KAAK,YAAY,gBAAgB;QACjC,KAAK,YAAY,aAAa,CAC/B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,WAAmB,EAAE,KAAc;IACjE,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,4CAA4C,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IAED,OAAO,4CAA4C,WAAW,GAAG,CAAC;AACpE,CAAC"}
+{"version":3,"file":"runCli.js","sourceRoot":"","sources":["../../src/cli/runCli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAuB,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAsBjD,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,EAAE;IACF,uEAAuE;IACvE,EAAE;IACF,QAAQ;IACR,uBAAuB;IACvB,EAAE;IACF,YAAY;IACZ,8EAA8E;IAC9E,EAAE;IACF,UAAU;IACV,8BAA8B;IAC9B,iCAAiC;CAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAuB,EAAE,OAAmB;IACvE,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrE,KAAK,OAAO;YACV,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACrE,KAAK,MAAM;YACT,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,OAAO,CAAC,WAAmB;IACxC,IAAI,MAAsB,CAAC;IAE3B,IAAI,CAAC;QACH,gGAAgG;QAChG,8FAA8F;QAC9F,qDAAqD;QACrD,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAElE,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACnE,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAE3D,OAAO,IAAI,GAAG,CAAS,CAAC,GAAG,aAAa,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,KAAc;IAEd,OAAO,CACL,KAAK,YAAY,oBAAoB;QACrC,KAAK,YAAY,gBAAgB;QACjC,KAAK,YAAY,aAAa;QAC9B,KAAK,YAAY,iBAAiB,CACnC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,WAAmB,EAAE,KAAc;IACjE,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,4CAA4C,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IAED,OAAO,4CAA4C,WAAW,GAAG,CAAC;AACpE,CAAC"}

package/dist/core/analyzeProject.d.ts

@@ -24,20 +24,27 @@
  * once and parsed once. No concurrency pool, cache or index is introduced before a measured need
  * appears.
  *
- * Usage/missing formulas (`usedNames` is the union of source-external package roots and script-used
- * package names; `declaredDependencyNames` is the union of every declared dependency section):
+ * Usage/missing formulas (`usedNames` is the union of source-external package roots, script-used
+ * package names and validated configuration-only package names; `declaredDependencyNames` is the
+ * union of every declared dependency section):
  *
  * ```text
  * sourceUsedNames = external package roots extracted from source files
  * scriptUsedNames = findPackageScriptUsage(scripts, dependencies ∪ devDependencies)
- * usedNames       = sourceUsedNames ∪ scriptUsedNames
+ * configUsedNames = validated configuration-only names handed to the analyzer (empty for now)
+ * usedNames       = sourceUsedNames ∪ scriptUsedNames ∪ configUsedNames
  * unusedDependencies    = dependencies    − usedNames
  * unusedDevDependencies = devDependencies − usedNames
  * missingDependencies   = sourceUsedNames − declaredDependencyNames
  * ```
  *
- * Scripts never generate missing-dependency findings, and peer/optional declarations suppress false
- * missing results through `declaredDependencyNames`.
+ * The evidence sources are deliberately asymmetric:
+ * - source imports and requires may contribute to `missingDependencies`;
+ * - package scripts and validated static tool configuration may only suppress an unused finding and
+ *   can never create a missing finding, because a command or configuration string is not evidence
+ *   that source code references the package.
+ *
+ * Peer/optional declarations suppress false missing results through `declaredDependencyNames`.
  */
 /**
  * The structured outcome of a dependency analysis.
@@ -57,6 +64,35 @@ export type AnalysisResult = {
     /** External packages referenced by source but not declared anywhere, sorted alphabetically. */
     missingDependencies: readonly string[];
 };
+/**
+ * Internal handoff for package names recognized by a validated static configuration reader.
+ *
+ * This is deliberately not the future public `why` evidence model: it carries no location, kind, or
+ * explanation, and it is never rendered or exposed. A configuration reader hands the package names it
+ * recognized to the analyzer through this set; only {@link analyzeProject} turns them into final
+ * unused/missing categories, so no configuration reader may edit report arrays directly.
+ *
+ * The analyzer validates every entry with {@link classifyPackageSpecifier} before using it, so
+ * arbitrary configuration text can never be treated as a package name. Accepted entries are collapsed
+ * to their package root and deduplicated case-sensitively, matching package-specifier classification
+ * (names are compared case-sensitively throughout DepVitals).
+ *
+ * The set may only suppress unused findings; it is never merged into the source-derived names that
+ * produce missing findings.
+ */
+export type ConfigUsageHints = ReadonlySet<string>;
+/**
+ * Optional inputs for {@link analyzeProject}.
+ */
+export type AnalysisOptions = {
+    /**
+     * Validated configuration-only package names, see {@link ConfigUsageHints}.
+     *
+     * Omitted or empty is the default, which is the state of the released product: no configuration
+     * rule is active yet, so the default keeps every report byte-for-byte identical.
+     */
+    readonly configUsedNames?: ConfigUsageHints | undefined;
+};
 /**
  * Why the analysis could not complete.
  *
@@ -84,9 +120,11 @@ export declare class AnalysisError extends Error {
  * The supplied root is resolved to an absolute path; `process.cwd()` is never changed and the target
  * project is never written to.
  *
+ * @param projectRoot - Directory to analyze.
+ * @param options - Optional {@link ConfigUsageHints}; an omitted or empty set changes nothing.
  * @throws {AnalysisError} when a discovered source file cannot be read or cannot be safely analyzed.
  * @throws {ProjectManifestError} when the manifest is missing, unreadable, invalid or malformed.
  * @throws {SourceFilesError} when the root is missing, is not a directory, or cannot be read.
  */
-export declare function analyzeProject(projectRoot: string): Promise<AnalysisResult>;
+export declare function analyzeProject(projectRoot: string, options?: AnalysisOptions): Promise<AnalysisResult>;
 //# sourceMappingURL=analyzeProject.d.ts.map

package/dist/core/analyzeProject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzeProject.d.ts","sourceRoot":"","sources":["../../src/core/analyzeProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAUH;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,uDAAuD;IACvD,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,+FAA+F;IAC/F,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;AAEvE;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO;CAKtE;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA6CjF"}
+{"version":3,"file":"analyzeProject.d.ts","sourceRoot":"","sources":["../../src/core/analyzeProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAWH;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,uDAAuD;IACvD,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,+FAA+F;IAC/F,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACzD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;AAEvE;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,OAAO;CAKtE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,cAAc,CAAC,CAqDzB"}

package/dist/core/analyzeProject.js

@@ -24,23 +24,31 @@
  * once and parsed once. No concurrency pool, cache or index is introduced before a measured need
  * appears.
  *
- * Usage/missing formulas (`usedNames` is the union of source-external package roots and script-used
- * package names; `declaredDependencyNames` is the union of every declared dependency section):
+ * Usage/missing formulas (`usedNames` is the union of source-external package roots, script-used
+ * package names and validated configuration-only package names; `declaredDependencyNames` is the
+ * union of every declared dependency section):
  *
  * ```text
  * sourceUsedNames = external package roots extracted from source files
  * scriptUsedNames = findPackageScriptUsage(scripts, dependencies ∪ devDependencies)
- * usedNames       = sourceUsedNames ∪ scriptUsedNames
+ * configUsedNames = validated configuration-only names handed to the analyzer (empty for now)
+ * usedNames       = sourceUsedNames ∪ scriptUsedNames ∪ configUsedNames
  * unusedDependencies    = dependencies    − usedNames
  * unusedDevDependencies = devDependencies − usedNames
  * missingDependencies   = sourceUsedNames − declaredDependencyNames
  * ```
  *
- * Scripts never generate missing-dependency findings, and peer/optional declarations suppress false
- * missing results through `declaredDependencyNames`.
+ * The evidence sources are deliberately asymmetric:
+ * - source imports and requires may contribute to `missingDependencies`;
+ * - package scripts and validated static tool configuration may only suppress an unused finding and
+ *   can never create a missing finding, because a command or configuration string is not evidence
+ *   that source code references the package.
+ *
+ * Peer/optional declarations suppress false missing results through `declaredDependencyNames`.
  */
 import { readFile } from 'node:fs/promises';
-import { loadProjectManifest } from '../scanner/projectManifest.js';
+import { dirname } from 'node:path';
+import { loadPackageTypeHint, loadProjectManifest } from '../scanner/projectManifest.js';
 import { discoverSourceFiles } from '../scanner/sourceFiles.js';
 import { extractModuleSpecifiers } from '../scanner/moduleSpecifiers.js';
 import { classifyPackageSpecifier } from '../scanner/packageSpecifier.js';
@@ -67,17 +75,23 @@ export class AnalysisError extends Error {
  * The supplied root is resolved to an absolute path; `process.cwd()` is never changed and the target
  * project is never written to.
  *
+ * @param projectRoot - Directory to analyze.
+ * @param options - Optional {@link ConfigUsageHints}; an omitted or empty set changes nothing.
  * @throws {AnalysisError} when a discovered source file cannot be read or cannot be safely analyzed.
  * @throws {ProjectManifestError} when the manifest is missing, unreadable, invalid or malformed.
  * @throws {SourceFilesError} when the root is missing, is not a directory, or cannot be read.
  */
-export async function analyzeProject(projectRoot) {
+export async function analyzeProject(projectRoot, options = {}) {
     const manifest = await loadProjectManifest(projectRoot);
     const sourceFiles = await discoverSourceFiles(manifest.root);
     // External package roots referenced by source files, collapsed to their package root.
     const sourceUsedNames = new Set();
+    const packageTypeByDirectory = new Map([
+        [manifest.root, manifest.packageType],
+    ]);
     for (const file of sourceFiles) {
-        const specifiers = await readAndExtract(file);
+        const packageType = await packageTypeForFile(file, manifest.root, packageTypeByDirectory);
+        const specifiers = await readAndExtract(file, packageType);
         for (const specifier of specifiers) {
             const classified = classifyPackageSpecifier(specifier);
             if (classified.kind === 'external') {
@@ -92,7 +106,10 @@ export async function analyzeProject(projectRoot) {
         Object.keys(manifest.devDependencies),
     ]);
     const scriptUsedNames = findPackageScriptUsage(manifest.scripts, declaredCandidates);
-    const usedNames = unionNames([[...sourceUsedNames], [...scriptUsedNames]]);
+    // Configuration evidence never reaches `sourceUsedNames`, which is the only input able to produce
+    // a missing finding; it can only make `usedNames` bigger and therefore suppress unused findings.
+    const configUsedNames = normalizeConfigHints(options.configUsedNames);
+    const usedNames = unionNames([[...sourceUsedNames], [...scriptUsedNames], [...configUsedNames]]);
     const unusedDependencies = declaredMinus(Object.keys(manifest.dependencies), usedNames);
     const unusedDevDependencies = declaredMinus(Object.keys(manifest.devDependencies), usedNames);
     // An external root is missing only when it is absent from every declared dependency section.
@@ -105,6 +122,26 @@ export async function analyzeProject(projectRoot) {
         missingDependencies,
     };
 }
+/**
+ * Resolve the nearest package scope for one discovered source file.
+ *
+ * An existing nested `package.json` starts a new scope even when it omits `type`; directories
+ * without one inherit their parent. Results are cached per directory for the rest of the scan.
+ */
+async function packageTypeForFile(file, projectRoot, cache) {
+    return packageTypeForDirectory(dirname(file), projectRoot, cache);
+}
+async function packageTypeForDirectory(directory, projectRoot, cache) {
+    if (cache.has(directory)) {
+        return cache.get(directory);
+    }
+    const hint = await loadPackageTypeHint(directory);
+    const packageType = hint === undefined
+        ? await packageTypeForDirectory(dirname(directory), projectRoot, cache)
+        : hint.packageType;
+    cache.set(directory, packageType);
+    return packageType;
+}
 /**
  * Read a discovered source file and extract its statically known specifiers.
  *
@@ -113,7 +150,7 @@ export async function analyzeProject(projectRoot) {
  * preserve the original error as `cause` and include the affected path, so a broken file never
  * yields a partial result or a misleading "clean" analysis.
  */
-async function readAndExtract(file) {
+async function readAndExtract(file, packageType) {
     let source;
     try {
         source = await readFile(file, 'utf8');
@@ -121,8 +158,32 @@ async function readAndExtract(file) {
     catch (error) {
         throw new AnalysisError(`Could not read source file ${file}: ${messageOf(error)}`, 'unreadable-source', error);
     }
+    /**
+     * Determine the narrow Node source mode needed for top-level `await`.
+     *
+     * Explicit module extensions win over the package type. CommonJS extensions remain scripts even
+     * under a module package, while `.js` and `.ts` follow the nearest package scope's exact
+     * `type: "module"` declaration.
+     */
+    function isModuleSource(file, packageType) {
+        const lower = file.toLowerCase();
+        if (lower.endsWith('.mjs') || lower.endsWith('.mts')) {
+            return true;
+        }
+        if (lower.endsWith('.cjs') || lower.endsWith('.cts')) {
+            return false;
+        }
+        return ((lower.endsWith('.js') ||
+            lower.endsWith('.jsx') ||
+            lower.endsWith('.ts') ||
+            lower.endsWith('.tsx')) &&
+            packageType === 'module');
+    }
     try {
-        const occurrences = extractModuleSpecifiers(source);
+        const occurrences = extractModuleSpecifiers(source, {
+            jsx: usesJsxSyntax(file, source),
+            module: isModuleSource(file, packageType),
+        });
         return occurrences.map((occurrence) => occurrence.specifier);
     }
     catch (error) {
@@ -132,6 +193,44 @@ async function readAndExtract(file) {
         throw error;
     }
 }
+/**
+ * Whether a discovered source file may contain JSX syntax.
+ *
+ * `.jsx` and `.tsx` always enable the extractor's bounded JSX mode. Plain JavaScript extensions
+ * (`.js`, `.mjs` and `.cjs`) enable it only when the source contains a JSX-like closing or
+ * self-closing tag. TypeScript extensions other than `.tsx` stay in plain mode, so a `.ts` type
+ * assertion (`<Foo>value`) is never mistaken for markup. Extension checks are case-insensitive.
+ */
+function usesJsxSyntax(file, source) {
+    const lower = file.toLowerCase();
+    if (lower.endsWith('.jsx') || lower.endsWith('.tsx')) {
+        return true;
+    }
+    return /\.(?:js|mjs|cjs)$/.test(lower) && /<\/[A-Za-z]|\/>/.test(source);
+}
+/**
+ * Turn the internal configuration handoff into validated package roots.
+ *
+ * The entries come from configuration reading code, not from the trusted analyzer, so each one is
+ * re-validated with the same utility that classifies source specifiers. Builtins, relative or
+ * absolute paths, malformed scoped names, URIs, whitespace and version suffixes are dropped instead
+ * of being trusted as package names. Accepted entries collapse to their package root and are
+ * deduplicated case-sensitively; an omitted set behaves exactly like an empty one.
+ */
+function normalizeConfigHints(hints) {
+    const names = new Set();
+    if (hints === undefined) {
+        return names;
+    }
+    for (const hint of hints) {
+        const classified = classifyPackageSpecifier(hint);
+        if (classified.kind === 'external') {
+            names.add(classified.packageName);
+        }
+    }
+    // Rebuilt from sorted names so iteration order never depends on the caller's set insertion order.
+    return new Set([...names].sort(compareNames));
+}
 /**
  * Union of the names of every supplied list, sorted alphabetically.
  */

package/dist/core/analyzeProject.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyzeProject.js","sourceRoot":"","sources":["../../src/core/analyzeProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AA+BnE;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAoB;IAEjC,YAAY,OAAe,EAAE,IAAuB,EAAE,KAAe;QACnE,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,sFAAsF;IACtF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAE9C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YAEvD,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,0FAA0F;IAC1F,MAAM,kBAAkB,GAAG,UAAU,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;KACtC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAErF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAE3E,MAAM,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAExF,MAAM,qBAAqB,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IAE9F,6FAA6F;IAC7F,uEAAuE;IACvE,MAAM,mBAAmB,GAAG,aAAa,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAElG,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI;QAC1B,kBAAkB;QAClB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,MAAc,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,8BAA8B,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,EACzD,mBAAmB,EACnB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACpD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACpE,MAAM,IAAI,aAAa,CACrB,eAAe,IAAI,2BAA2B,SAAS,CAAC,KAAK,CAAC,EAAE,EAChE,gBAAgB,EAChB,KAAK,CACN,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAqC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAA2B,EAAE,IAAyB;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"analyzeProject.js","sourceRoot":"","sources":["../../src/core/analyzeProject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AA8DnE;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAoB;IAEjC,YAAY,OAAe,EAAE,IAAuB,EAAE,KAAe;QACnE,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,UAA2B,EAAE;IAE7B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7D,sFAAsF;IACtF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAA6B;QACjE,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC;KACtC,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAE3D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;YAEvD,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,0FAA0F;IAC1F,MAAM,kBAAkB,GAAG,UAAU,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;KACtC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IAErF,kGAAkG;IAClG,iGAAiG;IACjG,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAEtE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IAEjG,MAAM,kBAAkB,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAExF,MAAM,qBAAqB,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IAE9F,6FAA6F;IAC7F,uEAAuE;IACvE,MAAM,mBAAmB,GAAG,aAAa,CAAC,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IAElG,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,IAAI;QAC1B,kBAAkB;QAClB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,WAAmB,EACnB,KAAsC;IAEtC,OAAO,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAAiB,EACjB,WAAmB,EACnB,KAAsC;IAEtC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,WAAW,GACf,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC;QACvE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAEvB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,WAA+B;IAE/B,IAAI,MAAc,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,8BAA8B,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,EACzD,mBAAmB,EACnB,KAAK,CACN,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,SAAS,cAAc,CAAC,IAAY,EAAE,WAA+B;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CACL,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YACrB,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzB,WAAW,KAAK,QAAQ,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,uBAAuB,CAAC,MAAM,EAAE;YAClD,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;YAChC,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACpE,MAAM,IAAI,aAAa,CACrB,eAAe,IAAI,2BAA2B,SAAS,CAAC,KAAK,CAAC,EAAE,EAChE,gBAAgB,EAChB,KAAK,CACN,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAEjC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,KAAmC;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,OAAO,IAAI,GAAG,CAAS,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAqC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,QAA2B,EAAE,IAAyB;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}