fundgraph 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 FundGraph contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+

package/README.md

@@ -1,3 +1,88 @@
-# Temporary Holding Version
+<p align="center"><img src="assets/fundgraph-cli.svg" alt="FundGraph CLI: local dependency analysis from your terminal" width="100%"></p>
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<p align="center">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-56d6be?style=flat-square" alt="MIT license"></a>
+  <img src="https://img.shields.io/badge/Node.js-20%20%7C%2022-83a8ff?style=flat-square" alt="Node.js 20 and 22">
+  <img src="https://img.shields.io/badge/command-fundgraph-b6a9ff?style=flat-square" alt="fundgraph command">
+</p>
+
+# fundgraph-cli
+
+The command-line interface for local dependency discovery and deterministic text or JSON reports. It uses
+`@fundgraph/core` for models and analysis; it does not duplicate domain logic.
+
+## Current scope
+
+`fundgraph analyze` reads a supported project directory, a JSON model file, or JSON from stdin. Directory discovery
+supports npm, PyPI, Cargo, and baseline Go `go.mod` requirements. The default directory mode is local-only. Add
+`--network` to explicitly fetch public npm, PyPI, or crates.io metadata and produce the complete evidence-backed
+funding report. Go remains discovery-only because Go metadata and funding providers are not implemented.
+
+The CLI now orchestrates those stages for arbitrary npm, PyPI, and Cargo projects when `--network` is explicitly
+supplied. Default directory analysis remains local-only; Go is discovery-only.
+
+## Commands
+
+```text
+fundgraph --help
+fundgraph version
+fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
+```
+
+`PATH` defaults to the current directory. Use `-` or omit the path to read JSON from stdin. `--offline` makes the local
+only behavior explicit. `--strict` treats invalid model input as an error.
+
+| Exit code | Meaning |
+|---:|---|
+| `0` | Analysis completed without diagnostics |
+| `1` | Partial analysis or model diagnostics |
+| `2` | Usage or invalid input |
+| `3` | Unexpected internal failure |
+
+JSON output keeps the compatibility summary fields and includes the versioned core report under `report`. Text output
+prints the summary and deterministic report. `--network` is opt-in and uses the core network policy.
+
+## Try it from the workspace
+
+The CLI package is not published yet. Run these commands from the `fundgraph-cli` repository directory:
+
+```sh
+cd ../fundgraph-core
+npm ci
+npm run build
+
+cd ../fundgraph-cli
+npm install --ignore-scripts --no-save ../fundgraph-core
+npm run build
+node dist/main.js --help
+node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format text --offline
+node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format json --offline
+node dist/main.js analyze ./my-project --format json --network
+```
+
+After compatible npm packages are published, install and run it with:
+
+```sh
+npm install -g fundgraph
+fundgraph analyze ./my-project --format text --offline
+```
+
+## Ownership and safety
+
+- This repository owns argument parsing, terminal output, CLI errors, and process exit codes.
+- `fundgraph-core` owns dependency models, parsing, evidence, relationship logic, and opt-in project orchestration.
+- Input files are bounded and treated as data; the CLI does not execute project code.
+- The command does not identify maintainers, endorse funding destinations, manage wallets, or execute payments.
+
+## Development
+
+```sh
+npm run lint
+npm run typecheck
+npm test
+npm run build
+npm pack --dry-run
+```
+
+CI defines Ubuntu, Windows, and macOS jobs on Node 20 and 22. See [`CONTRIBUTING.md`](CONTRIBUTING.md) and the
+project-level `fundgraph` repository for the cross-repository roadmap and policies.

package/dist/main.d.ts

@@ -0,0 +1,4 @@
+export declare const CLI_VERSION = "0.1.0";
+export declare const MAX_INPUT_BYTES = 1048576;
+export declare function run(argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,WAAW,UAAU,CAAC;AACnC,eAAO,MAAM,eAAe,UAAY,CAAC;AAoLzC,wBAAsB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE"}

package/dist/main.js

@@ -0,0 +1,201 @@
+import { readFileSync, statSync } from 'node:fs';
+import { stderr, stdout } from 'node:process';
+import { analyzeProject, createReport, discoverDependencies, renderReportText, validateModel } from '@fundgraph/core';
+import { FundGraphCliError, parseArguments } from './options.js';
+export const CLI_VERSION = '0.1.0';
+export const MAX_INPUT_BYTES = 1_048_576;
+const HELP = `FundGraph ${CLI_VERSION}
+
+Analyze a JSON model document and explain its validated model inventory.
+
+Usage:
+  fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
+  fundgraph version
+  fundgraph --help
+
+Input:
+  PATH may be a project directory (npm, PyPI, or Cargo), a JSON file
+  containing versioned FundGraph models, or -/omitted for stdin.
+
+Options:
+  --format text|json  Select output format (default: text)
+  --offline           Use only local input and do not enable network access
+  --network           Fetch public registry metadata and parse declared funding evidence
+  --strict            Treat invalid models as an invalid-input failure
+  -h, --help          Show this help
+  -v, --version       Show the CLI version
+`;
+function readInput(inputPath) {
+    if (inputPath === '-')
+        return readFromStdin();
+    let stats;
+    try {
+        stats = statSync(inputPath);
+    }
+    catch {
+        throw new FundGraphCliError('INVALID_INPUT', `Input path does not exist: ${inputPath}`);
+    }
+    if (!stats.isFile()) {
+        throw new FundGraphCliError('INVALID_INPUT', 'Input must be a JSON model file or a supported project directory.');
+    }
+    if (stats.size > MAX_INPUT_BYTES) {
+        throw new FundGraphCliError('INPUT_TOO_LARGE', `Input exceeds ${MAX_INPUT_BYTES} bytes`);
+    }
+    return readFileSync(inputPath, 'utf8');
+}
+function readFromStdin() {
+    const input = readFileSync(0);
+    if (input.byteLength > MAX_INPUT_BYTES)
+        throw new FundGraphCliError('INPUT_TOO_LARGE', `Input exceeds ${MAX_INPUT_BYTES} bytes`);
+    return input.toString('utf8');
+}
+function extractModels(parsed) {
+    if (Array.isArray(parsed))
+        return parsed;
+    if (typeof parsed === 'object' && parsed !== null && Array.isArray(parsed.models)) {
+        return parsed.models;
+    }
+    throw new FundGraphCliError('INVALID_INPUT', 'JSON input must be an array of models or an object containing a models array');
+}
+function reportForModels(models, diagnostics) {
+    const grouped = {
+        Project: [],
+        Dependency: [],
+        Package: [],
+        Registry: [],
+        Repository: [],
+        FundingSource: [],
+        Evidence: [],
+        Confidence: [],
+        Relationship: []
+    };
+    for (const model of models)
+        grouped[model.kind].push(model);
+    const project = grouped.Project[0];
+    return createReport({
+        ...(project ? { project } : {}),
+        dependencies: grouped.Dependency,
+        packages: grouped.Package,
+        registries: grouped.Registry,
+        repositories: grouped.Repository,
+        fundingSources: grouped.FundingSource,
+        evidence: grouped.Evidence,
+        relationships: grouped.Relationship,
+        diagnostics,
+    });
+}
+async function analyze(options) {
+    if (options.inputPath !== '-') {
+        try {
+            if (statSync(options.inputPath).isDirectory()) {
+                if (options.network) {
+                    const analyzed = await analyzeProject(options.inputPath);
+                    const diagnostics = analyzed.report.diagnostics;
+                    return {
+                        schemaVersion: '1.0', input: options.inputPath, offline: false, strict: options.strict,
+                        network: true,
+                        modelCount: analyzed.report.summary.dependencyCount, edgeCount: analyzed.discovery.graph.edges.length,
+                        ecosystems: analyzed.discovery.ecosystems, counts: { Dependency: analyzed.report.summary.dependencyCount, Package: analyzed.report.summary.packageCount, FundingSource: analyzed.report.summary.fundingSourceCount, Relationship: analyzed.report.summary.relationshipCount },
+                        diagnostics, report: analyzed.report,
+                    };
+                }
+                const discovered = discoverDependencies(options.inputPath);
+                const diagnostics = discovered.diagnostics.map((item) => ({ code: item.code, message: item.message, ...(item.sourcePath === undefined ? {} : { sourcePath: item.sourcePath }) }));
+                if (options.strict && diagnostics.length > 0)
+                    throw new FundGraphCliError('INVALID_INPUT', `${diagnostics.length} discovery diagnostic(s) reported`);
+                const report = createReport({ project: discovered.project, dependencies: discovered.graph.nodes, diagnostics });
+                return {
+                    schemaVersion: '1.0',
+                    input: options.inputPath,
+                    offline: options.offline,
+                    strict: options.strict,
+                    network: false,
+                    modelCount: discovered.graph.nodes.length,
+                    edgeCount: discovered.graph.edges.length,
+                    ecosystems: discovered.ecosystems,
+                    counts: { Dependency: discovered.graph.nodes.length },
+                    diagnostics,
+                    report,
+                };
+            }
+        }
+        catch (error) {
+            if (error instanceof FundGraphCliError)
+                throw error;
+            throw new FundGraphCliError('INVALID_INPUT', error instanceof Error ? error.message : 'Unable to inspect input path');
+        }
+    }
+    const source = readInput(options.inputPath);
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch {
+        throw new FundGraphCliError('INVALID_INPUT', 'Input is not valid JSON');
+    }
+    const models = extractModels(parsed);
+    const diagnostics = [];
+    const validModels = [];
+    models.forEach((model, index) => {
+        try {
+            validateModel(model);
+            validModels.push(model);
+        }
+        catch (error) {
+            const code = error instanceof Error && 'code' in error ? String(error.code) : 'INVALID_MODEL';
+            const message = error instanceof Error ? error.message : 'Model validation failed';
+            diagnostics.push({ code, message, index });
+        }
+    });
+    if (options.strict && diagnostics.length > 0) {
+        throw new FundGraphCliError('INVALID_INPUT', `${diagnostics.length} model(s) failed validation`);
+    }
+    const counts = {};
+    for (const model of validModels)
+        counts[model.kind] = (counts[model.kind] ?? 0) + 1;
+    const report = reportForModels(validModels, diagnostics);
+    return { schemaVersion: '1.0', input: options.inputPath, offline: options.offline, strict: options.strict, network: false, modelCount: validModels.length, edgeCount: 0, ecosystems: [], counts, diagnostics, report };
+}
+function renderText(result) {
+    const lines = [
+        'FundGraph analysis',
+        `Input: ${result.input}`,
+        `Models: ${result.modelCount}`,
+        `Edges: ${result.edgeCount}`,
+        ...(result.ecosystems.length > 0 ? [`Ecosystems: ${result.ecosystems.join(', ')}`] : []),
+        `Network: ${result.network ? 'enabled (public metadata only)' : 'disabled'}`,
+    ];
+    for (const [kind, count] of Object.entries(result.counts).sort(([a], [b]) => a.localeCompare(b)))
+        lines.push(`  ${kind}: ${count}`);
+    if (result.diagnostics.length > 0) {
+        lines.push(`Diagnostics: ${result.diagnostics.length}`);
+        for (const diagnostic of result.diagnostics)
+            lines.push(`  [${diagnostic.code}] model ${diagnostic.index}: ${diagnostic.message}`);
+    }
+    return `${lines.join('\n')}\n\n${renderReportText(result.report)}`;
+}
+export async function run(argv) {
+    try {
+        const parsed = parseArguments(argv);
+        if (parsed.command === 'help') {
+            stdout.write(HELP);
+            return 0;
+        }
+        if (parsed.command === 'version') {
+            stdout.write(`${CLI_VERSION}\n`);
+            return 0;
+        }
+        const result = await analyze(parsed.options);
+        stdout.write(parsed.options.format === 'json' ? `${JSON.stringify(result, null, 2)}\n` : renderText(result));
+        return result.diagnostics.length > 0 ? 1 : 0;
+    }
+    catch (error) {
+        const code = error instanceof FundGraphCliError ? error.code : 'INTERNAL_ERROR';
+        const message = error instanceof Error ? error.message : 'Unexpected error';
+        stderr.write(`fundgraph: [${code}] ${message}\n`);
+        return code === 'USAGE' || code === 'INVALID_INPUT' || code === 'INPUT_TOO_LARGE' ? 2 : 3;
+    }
+}
+if (process.argv[1])
+    run(process.argv.slice(2)).then((code) => { process.exitCode = code; });
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,aAAa,EAA4C,MAAM,iBAAiB,CAAC;AAChK,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAmB,MAAM,cAAc,CAAC;AAElF,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC,MAAM,IAAI,GAAG,aAAa,WAAW;;;;;;;;;;;;;;;;;;;;CAoBpC,CAAC;AAgBF,SAAS,SAAS,CAAC,SAAiB;IAClC,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,aAAa,EAAE,CAAC;IAC9C,IAAI,KAAkC,CAAC;IACvC,IAAI,CAAC;QACH,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,8BAA8B,SAAS,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,mEAAmE,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,eAAe,QAAQ,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,UAAU,GAAG,eAAe;QAAE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,iBAAiB,eAAe,QAAQ,CAAC,CAAC;IACjI,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAE,MAA+B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5G,OAAQ,MAAgC,CAAC,MAAM,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,8EAA8E,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,eAAe,CAAC,MAAiC,EAAE,WAA0C;IACpG,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,EAAoD;QAC7D,UAAU,EAAE,EAAuD;QACnE,OAAO,EAAE,EAAoD;QAC7D,QAAQ,EAAE,EAAqD;QAC/D,UAAU,EAAE,EAAuD;QACnE,aAAa,EAAE,EAA0D;QACzE,QAAQ,EAAE,EAAqD;QAC/D,UAAU,EAAE,EAAuD;QACnE,YAAY,EAAE,EAAyD;KACxE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,YAAY,CAAC;QAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,YAAY,EAAE,OAAO,CAAC,UAAU;QAChC,QAAQ,EAAE,OAAO,CAAC,OAAO;QACzB,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,YAAY,EAAE,OAAO,CAAC,UAAU;QAChC,cAAc,EAAE,OAAO,CAAC,aAAa;QACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,WAAW;KACZ,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAmB;IACxC,IAAI,OAAO,CAAC,SAAS,KAAK,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;oBAChD,OAAO;wBACL,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtF,OAAO,EAAE,IAAI;wBACb,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;wBACrG,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE;wBAC7Q,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACrC,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC3D,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClL,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,GAAG,WAAW,CAAC,MAAM,mCAAmC,CAAC,CAAC;gBACrJ,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAChH,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,KAAK,EAAE,OAAO,CAAC,SAAS;oBACxB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;oBACzC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;oBACxC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE;oBACrD,WAAW;oBACX,MAAM;iBACP,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,WAAW,GAAkC,EAAE,CAAC;IACtD,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,KAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YACrH,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;YACnF,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,iBAAiB,CAAC,eAAe,EAAE,GAAG,WAAW,CAAC,MAAM,6BAA6B,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,WAAW;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACzD,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACzN,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB;IACxC,MAAM,KAAK,GAAG;QACZ,oBAAoB;QACpB,UAAU,MAAM,CAAC,KAAK,EAAE;QACxB,WAAW,MAAM,CAAC,UAAU,EAAE;QAC9B,UAAU,MAAM,CAAC,SAAS,EAAE;QAC5B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,YAAY,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,UAAU,EAAE;KAC7E,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IACpI,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,WAAW,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAuB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7G,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAChF,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/options.d.ts

@@ -0,0 +1,23 @@
+export type OutputFormat = 'text' | 'json';
+export interface CliOptions {
+    inputPath: string;
+    format: OutputFormat;
+    offline: boolean;
+    network: boolean;
+    strict: boolean;
+}
+export type ParsedCommand = {
+    command: 'help';
+} | {
+    command: 'version';
+} | {
+    command: 'analyze';
+    options: CliOptions;
+};
+export type CliErrorCode = 'USAGE' | 'INVALID_INPUT' | 'INPUT_TOO_LARGE' | 'INTERNAL_ERROR';
+export declare class FundGraphCliError extends Error {
+    readonly code: CliErrorCode;
+    constructor(code: CliErrorCode, message: string);
+}
+export declare function parseArguments(argv: readonly string[]): ParsedCommand;
+//# sourceMappingURL=options.d.ts.map

package/dist/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,GACtB;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,eAAe,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAE5F,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY;IAAvC,YAAqB,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAGvD;CACF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAgDrE"}

package/dist/options.js

@@ -0,0 +1,66 @@
+export class FundGraphCliError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'FundGraphCliError';
+    }
+}
+export function parseArguments(argv) {
+    if (argv.length === 0 || argv[0] === '--help' || argv[0] === '-h')
+        return { command: 'help' };
+    if (argv[0] === 'version' || argv[0] === '--version' || argv[0] === '-v') {
+        if (argv.length > 1)
+            throw new FundGraphCliError('USAGE', 'version does not accept additional arguments');
+        return { command: 'version' };
+    }
+    if (argv[0] !== 'analyze')
+        throw new FundGraphCliError('USAGE', `Unknown command: ${argv[0]}`);
+    let inputPath = '-';
+    let format = 'text';
+    let offline = false;
+    let network = false;
+    let strict = false;
+    let pathSeen = false;
+    for (let index = 1; index < argv.length; index += 1) {
+        const argument = argv[index];
+        if (argument === '--help' || argument === '-h')
+            return { command: 'help' };
+        if (argument === '--offline') {
+            offline = true;
+            continue;
+        }
+        if (argument === '--network') {
+            network = true;
+            continue;
+        }
+        if (argument === '--strict') {
+            strict = true;
+            continue;
+        }
+        if (argument === '--format') {
+            const value = argv[++index];
+            if (value !== 'text' && value !== 'json')
+                throw new FundGraphCliError('USAGE', '--format requires text or json');
+            format = value;
+            continue;
+        }
+        if (argument?.startsWith('--format=')) {
+            const value = argument.slice('--format='.length);
+            if (value !== 'text' && value !== 'json')
+                throw new FundGraphCliError('USAGE', '--format requires text or json');
+            format = value;
+            continue;
+        }
+        if (argument?.startsWith('-'))
+            throw new FundGraphCliError('USAGE', `Unknown option: ${argument}`);
+        if (pathSeen)
+            throw new FundGraphCliError('USAGE', 'analyze accepts only one input path');
+        inputPath = argument ?? '-';
+        pathSeen = true;
+    }
+    if (offline && network)
+        throw new FundGraphCliError('USAGE', '--offline and --network cannot be combined');
+    return { command: 'analyze', options: { inputPath, format, offline, network, strict } };
+}
+//# sourceMappingURL=options.js.map

package/dist/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB,IAAI;IAAzB,YAAqB,IAAkB,EAAE,OAAe;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;oBADI,IAAI;QAEvB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC9F,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE/F,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,MAAM,GAAiB,MAAM,CAAC;IAClC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC3E,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;YACjH,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;YACjH,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACnG,IAAI,QAAQ;YAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QAC1F,SAAS,GAAG,QAAQ,IAAI,GAAG,CAAC;QAC5B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,IAAI,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,4CAA4C,CAAC,CAAC;IAC3G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;AAC1F,CAAC"}

package/package.json

@@ -1,6 +1,26 @@
-{
-  "name": "fundgraph",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "fundgraph",
+  "version": "0.1.0",
+  "description": "CLI for evidence-first dependency funding analysis",
+  "license": "MIT",
+  "type": "module",
+  "private": false,
+  "bin": "./dist/main.js",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@fundgraph/core": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "node scripts/lint.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "npm run build && node --test test/cli.test.js"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.4",
+    "typescript": "^7.0.2"
+  }
+}
+