fundgraph 0.1.1 → 0.1.2

package/README.md

@@ -1,88 +1,89 @@
-<p align="center"><img src="assets/fundgraph-cli.svg" alt="FundGraph CLI: local dependency analysis from your terminal" width="100%"></p>
-
-<p align="center">
-  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-56d6be?style=flat-square" alt="MIT license"></a>
-  <img src="https://img.shields.io/badge/Node.js-20%20%7C%2022-83a8ff?style=flat-square" alt="Node.js 20 and 22">
-  <img src="https://img.shields.io/badge/command-fundgraph-b6a9ff?style=flat-square" alt="fundgraph command">
-</p>
-
-# fundgraph-cli
-
-The command-line interface for local dependency discovery and deterministic text or JSON reports. It uses
-`@fundgraph/core` for models and analysis; it does not duplicate domain logic.
-
-## Current scope
-
-`fundgraph analyze` reads a supported project directory, a JSON model file, or JSON from stdin. Directory discovery
-supports npm, PyPI, Cargo, and baseline Go `go.mod` requirements. The default directory mode is local-only. Add
-`--network` to explicitly fetch public npm, PyPI, or crates.io metadata and produce the complete evidence-backed
-funding report. Go remains discovery-only because Go metadata and funding providers are not implemented.
-
-The CLI now orchestrates those stages for arbitrary npm, PyPI, and Cargo projects when `--network` is explicitly
-supplied. Default directory analysis remains local-only; Go is discovery-only.
-
-## Commands
-
-```text
-fundgraph --help
-fundgraph version
-fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
-```
-
-`PATH` defaults to the current directory. Use `-` or omit the path to read JSON from stdin. `--offline` makes the local
-only behavior explicit. `--strict` treats invalid model input as an error.
-
-| Exit code | Meaning |
-|---:|---|
-| `0` | Analysis completed without diagnostics |
-| `1` | Partial analysis or model diagnostics |
-| `2` | Usage or invalid input |
-| `3` | Unexpected internal failure |
-
-JSON output keeps the compatibility summary fields and includes the versioned core report under `report`. Text output
-prints the summary and deterministic report. `--network` is opt-in and uses the core network policy.
-
-## Try it from the workspace
-
-The CLI package is not published yet. Run these commands from the `fundgraph-cli` repository directory:
-
-```sh
-cd ../fundgraph-core
-npm ci
-npm run build
-
-cd ../fundgraph-cli
-npm install --ignore-scripts --no-save ../fundgraph-core
-npm run build
-node dist/main.js --help
-node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format text --offline
-node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format json --offline
-node dist/main.js analyze ./my-project --format json --network
-```
-
-After compatible npm packages are published, install and run it with:
-
-```sh
-npm install -g fundgraph
-fundgraph analyze ./my-project --format text --offline
-```
-
-## Ownership and safety
-
-- This repository owns argument parsing, terminal output, CLI errors, and process exit codes.
-- `fundgraph-core` owns dependency models, parsing, evidence, relationship logic, and opt-in project orchestration.
-- Input files are bounded and treated as data; the CLI does not execute project code.
-- The command does not identify maintainers, endorse funding destinations, manage wallets, or execute payments.
-
-## Development
-
-```sh
-npm run lint
-npm run typecheck
-npm test
-npm run build
-npm pack --dry-run
-```
-
-CI defines Ubuntu, Windows, and macOS jobs on Node 20 and 22. See [`CONTRIBUTING.md`](CONTRIBUTING.md) and the
-project-level `fundgraph` repository for the cross-repository roadmap and policies.
+<p align="center"><img src="assets/fundgraph-cli.svg" alt="FundGraph CLI: local dependency analysis from your terminal" width="100%"></p>
+
+<p align="center">
+  <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-56d6be?style=flat-square" alt="MIT license"></a>
+  <img src="https://img.shields.io/badge/Node.js-20%20%7C%2022-83a8ff?style=flat-square" alt="Node.js 20 and 22">
+  <img src="https://img.shields.io/badge/command-fundgraph-b6a9ff?style=flat-square" alt="fundgraph command">
+</p>
+
+# fundgraph-cli
+
+The command-line interface for local dependency discovery and deterministic text or JSON reports. It uses
+`@fundgraph/core` for models and analysis; it does not duplicate domain logic.
+
+## Current scope
+
+`fundgraph analyze` reads a supported project directory, a JSON model file, or JSON from stdin. Directory discovery
+supports npm, PyPI, Cargo, and baseline Go `go.mod` requirements. The default directory mode is local-only. Add
+`--network` to explicitly fetch public npm, PyPI, or crates.io metadata and produce the complete evidence-backed
+funding report. Go remains discovery-only because Go metadata and funding providers are not implemented.
+
+The CLI now orchestrates those stages for arbitrary npm, PyPI, and Cargo projects when `--network` is explicitly
+supplied. Default directory analysis remains local-only; Go is discovery-only.
+
+## Commands
+
+```text
+fundgraph --help
+fundgraph version
+fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
+```
+
+`PATH` defaults to the current directory. Use `-` or omit the path to read JSON from stdin. `--offline` makes the local
+only behavior explicit. `--strict` treats invalid model input as an error.
+
+| Exit code | Meaning |
+|---:|---|
+| `0` | Analysis completed without diagnostics |
+| `1` | Partial analysis or model diagnostics |
+| `2` | Usage or invalid input |
+| `3` | Unexpected internal failure |
+
+JSON output keeps the compatibility summary fields and includes the versioned core report under `report`. Text output
+prints the summary and deterministic report. `--network` is opt-in and uses the core network policy.
+
+## Try it from the workspace
+
+For normal use, install the published CLI package:
+
+```sh
+npm install -g fundgraph@0.1.2
+fundgraph --version
+fundgraph analyze ./my-project --format text --offline
+```
+
+For repository development, run these commands from the `fundgraph-cli` repository directory:
+
+```sh
+cd ../fundgraph-core
+npm ci
+npm run build
+
+cd ../fundgraph-cli
+npm install --ignore-scripts --no-save ../fundgraph-core
+npm run build
+node dist/main.js --help
+node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format text --offline
+node dist/main.js analyze ../fundgraph-core/test/fixtures/npm-workspace --format json --offline
+node dist/main.js analyze ./my-project --format json --network
+```
+
+## Ownership and safety
+
+- This repository owns argument parsing, terminal output, CLI errors, and process exit codes.
+- `fundgraph-core` owns dependency models, parsing, evidence, relationship logic, and opt-in project orchestration.
+- Input files are bounded and treated as data; the CLI does not execute project code.
+- The command does not identify maintainers, endorse funding destinations, manage wallets, or execute payments.
+
+## Development
+
+```sh
+npm run lint
+npm run typecheck
+npm test
+npm run build
+npm pack --dry-run
+```
+
+CI defines Ubuntu, Windows, and macOS jobs on Node 20 and 22. See [`CONTRIBUTING.md`](CONTRIBUTING.md) and the
+project-level `fundgraph` repository for the cross-repository roadmap and policies.

package/dist/main.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-export declare const CLI_VERSION = "0.1.1";
+export declare const CLI_VERSION = "0.1.2";
 export declare const MAX_INPUT_BYTES = 1048576;
 export declare function run(argv: readonly string[]): Promise<number>;
 //# sourceMappingURL=main.d.ts.map

package/dist/main.js

@@ -3,28 +3,28 @@ import { readFileSync, statSync } from 'node:fs';
 import { stderr, stdout } from 'node:process';
 import { analyzeProject, createReport, discoverDependencies, renderReportText, validateModel } from '@fundgraph/core';
 import { FundGraphCliError, parseArguments } from './options.js';
-export const CLI_VERSION = '0.1.1';
+export const CLI_VERSION = '0.1.2';
 export const MAX_INPUT_BYTES = 1_048_576;
-const HELP = `FundGraph ${CLI_VERSION}
-
-Analyze a JSON model document and explain its validated model inventory.
-
-Usage:
-  fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
-  fundgraph version
-  fundgraph --help
-
-Input:
-  PATH may be a project directory (npm, PyPI, or Cargo), a JSON file
-  containing versioned FundGraph models, or -/omitted for stdin.
-
-Options:
-  --format text|json  Select output format (default: text)
-  --offline           Use only local input and do not enable network access
-  --network           Fetch public registry metadata and parse declared funding evidence
-  --strict            Treat invalid models as an invalid-input failure
-  -h, --help          Show this help
-  -v, --version       Show the CLI version
+const HELP = `FundGraph ${CLI_VERSION}
+
+Analyze a JSON model document and explain its validated model inventory.
+
+Usage:
+  fundgraph analyze [PATH] [--format text|json] [--offline|--network] [--strict]
+  fundgraph version
+  fundgraph --help
+
+Input:
+  PATH may be a project directory (npm, PyPI, or Cargo), a JSON file
+  containing versioned FundGraph models, or -/omitted for stdin.
+
+Options:
+  --format text|json  Select output format (default: text)
+  --offline           Use only local input and do not enable network access
+  --network           Fetch public registry metadata and parse declared funding evidence
+  --strict            Treat invalid models as an invalid-input failure
+  -h, --help          Show this help
+  -v, --version       Show the CLI version
 `;
 function readInput(inputPath) {
     if (inputPath === '-')

package/package.json

@@ -1,22 +1,45 @@
 {
   "name": "fundgraph",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "CLI for evidence-first dependency funding analysis",
   "license": "MIT",
   "type": "module",
   "private": false,
-  "bin": "./dist/main.js",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/FundGraph/fundgraph-cli.git"
+  },
+  "homepage": "https://github.com/FundGraph/fundgraph-cli#readme",
+  "bugs": {
+    "url": "https://github.com/FundGraph/fundgraph-cli/issues"
+  },
+  "keywords": [
+    "dependency-analysis",
+    "open-source-funding",
+    "cli",
+    "provenance",
+    "typescript"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "fundgraph": "dist/main.js"
+  },
   "files": [
     "dist"
   ],
   "dependencies": {
-    "@fundgraph/core": "0.1.0"
+    "@fundgraph/core": "0.1.1"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "lint": "node scripts/lint.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "npm run build && node --test test/cli.test.js"
+    "test": "npm run build && node --test test/cli.test.js test/package.test.js"
   },
   "devDependencies": {
     "@types/node": "^26.6.4",