optiprune 2.1.4 → 2.1.7

package/dist/layer5.js

@@ -1,141 +0,0 @@
-import { walkAst } from "./parser.js";
-/**
- * Layer 5: Schema Alignment
- * Protects public interfaces and contracts (Zod, Prisma, GraphQL, OpenAPI) from being falsely marked as dead code.
- */
-export async function analyzeLayer5(context) {
-    const findings = [];
-    const externallyDefinedContracts = new Set(context.options.externalContracts || []);
-    const PROTECTED_DECORATORS = new Set([
-        'Controller', 'Injectable', 'Module', 'Resolver', 'Directive',
-        'ObjectType', 'InputType', 'Field', 'Query', 'Mutation', 'Subscription',
-        'Entity', 'Table', 'Column', 'PrimaryGeneratedColumn', 'OneToMany', 'ManyToOne', 'ManyToMany', 'JoinColumn',
-        'Get', 'Post', 'Put', 'Delete', 'Patch', 'Options', 'Head', 'All'
-    ]);
-    // Phase 1: Identify symbols explicitly provided as external contracts via options
-    // These are already added to `externallyDefinedContracts` at initialization.
-    // Phase 2: Decorator & Framework Metadata Reader
-    for (const module of context.modules.values()) {
-        if (!module.ast)
-            continue;
-        walkAst(module.ast, (rawNode) => {
-            const node = rawNode;
-            // 1. Framework Decorators (NestJS, TypeORM, MikroORM, TypeGraphQL)
-            const decorators = [
-                ...(Array.isArray(node.decorators) ? node.decorators : []),
-                ...(Array.isArray(node.modifiers)
-                    ? node.modifiers.filter((m) => m.type === 'Decorator')
-                    : []),
-            ];
-            if (decorators.length > 0) {
-                for (const decorator of decorators) {
-                    let decoratorName = "";
-                    const expr = decorator.expression;
-                    if (expr?.type === 'CallExpression' && expr.callee?.type === 'Identifier') {
-                        decoratorName = expr.callee.name;
-                    }
-                    else if (expr?.type === 'Identifier') {
-                        decoratorName = expr.name;
-                    }
-                    if (PROTECTED_DECORATORS.has(decoratorName)) {
-                        let targetNode = node;
-                        if ((node.type === 'ExportNamedDeclaration' || node.type === 'ExportDefaultDeclaration') && node.declaration) {
-                            targetNode = node.declaration;
-                        }
-                        if ((targetNode.type === 'ClassDeclaration' || targetNode.type === 'FunctionDeclaration') && targetNode.id?.name) {
-                            externallyDefinedContracts.add(targetNode.id.name);
-                        }
-                        else if ((targetNode.type === 'ClassMethod' || targetNode.type === 'ClassProperty') && targetNode.key?.type === 'Identifier') {
-                            externallyDefinedContracts.add(targetNode.key.name);
-                        }
-                        else if (targetNode.type === 'VariableDeclaration') {
-                            targetNode.declarations.forEach((decl) => {
-                                if (decl.id?.type === 'Identifier')
-                                    externallyDefinedContracts.add(decl.id.name);
-                            });
-                        }
-                    }
-                }
-            }
-            // 2. JSDoc Annotations (@public, @used, optiprune-ignore)
-            if (Array.isArray(node.leadingComments)) {
-                const isPublic = node.leadingComments.some((comment) => comment.value.includes("@public") ||
-                    comment.value.includes("@used") ||
-                    comment.value.includes("optiprune-ignore"));
-                if (isPublic) {
-                    if (node.type === 'VariableDeclaration') {
-                        node.declarations.forEach((decl) => {
-                            if (decl.id?.type === 'Identifier')
-                                externallyDefinedContracts.add(decl.id.name);
-                        });
-                    }
-                    else if ((node.type === 'FunctionDeclaration' || node.type === 'ClassDeclaration') &&
-                        node.id?.name) {
-                        externallyDefinedContracts.add(node.id.name);
-                    }
-                    else if (node.type === 'ExportNamedDeclaration' && node.declaration) {
-                        const decl = node.declaration;
-                        if (decl.type === 'VariableDeclaration') {
-                            decl.declarations.forEach((d) => {
-                                if (d.id?.type === 'Identifier')
-                                    externallyDefinedContracts.add(d.id.name);
-                            });
-                        }
-                        else if ((decl.type === 'FunctionDeclaration' || decl.type === 'ClassDeclaration') &&
-                            decl.id?.name) {
-                            externallyDefinedContracts.add(decl.id.name);
-                        }
-                    }
-                }
-            }
-            // 3. Schema & Validation Framework Naming Pattern Matching
-            let varDeclarations = [];
-            if (node.type === 'VariableDeclaration') {
-                varDeclarations = node.declarations || [];
-            }
-            else if (node.type === 'ExportNamedDeclaration' && node.declaration?.type === 'VariableDeclaration') {
-                varDeclarations = node.declaration.declarations || [];
-            }
-            for (const decl of varDeclarations) {
-                if (decl.id?.type === 'Identifier') {
-                    const varName = decl.id.name;
-                    const init = decl.init;
-                    const isZodCall = init?.type === 'CallExpression' &&
-                        ((init.callee?.type === 'MemberExpression' &&
-                            (init.callee.object?.name === 'z' || init.callee.object?.name === 'zod')) ||
-                            (init.callee?.type === 'Identifier' &&
-                                (init.callee.name === 'z' || init.callee.name.startsWith('zod'))));
-                    if (isZodCall || varName.endsWith('Schema')) {
-                        externallyDefinedContracts.add(varName);
-                    }
-                }
-            }
-            // Check class and function declarations ending in Schema (e.g., export class UserSchema)
-            let targetNameNode = null;
-            if (node.type === 'ClassDeclaration' || node.type === 'FunctionDeclaration') {
-                targetNameNode = node;
-            }
-            else if (node.type === 'ExportNamedDeclaration' &&
-                node.declaration &&
-                (node.declaration.type === 'ClassDeclaration' || node.declaration.type === 'FunctionDeclaration')) {
-                targetNameNode = node.declaration;
-            }
-            if (targetNameNode?.id?.name && targetNameNode.id.name.endsWith('Schema')) {
-                externallyDefinedContracts.add(targetNameNode.id.name);
-            }
-        });
-    }
-    // Phase 3: Apply Contract Guard Marking to ExportRecords
-    for (const module of context.modules.values()) {
-        if (module.exports) {
-            for (const exportRecord of module.exports) {
-                if ((exportRecord.name && externallyDefinedContracts.has(exportRecord.name)) ||
-                    (exportRecord.exportedAs && externallyDefinedContracts.has(exportRecord.exportedAs))) {
-                    exportRecord.isExternalContract = true;
-                }
-            }
-        }
-    }
-    return findings;
-}
-//# sourceMappingURL=layer5.js.map

package/dist/layer5.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"layer5.js","sourceRoot":"","sources":["../src/layer5.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB;IAC1D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAE5F,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACnC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW;QAC7D,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc;QACvE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY;QAC3G,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK;KAClE,CAAC,CAAC;IAEH,kFAAkF;IAClF,6EAA6E;IAE7E,iDAAiD;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,SAAS;QAE1B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,OAAc,CAAC;YAE5B,mEAAmE;YACnE,MAAM,UAAU,GAAU;gBACxB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;oBAC3D,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;YAEF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,IAAI,aAAa,GAAG,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAiB,CAAC;oBACzC,IAAI,IAAI,EAAE,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC1E,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACnC,CAAC;yBAAM,IAAI,IAAI,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;wBACvC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC;oBAC5B,CAAC;oBAED,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;wBAC5C,IAAI,UAAU,GAAG,IAAI,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;4BAC7G,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;wBAChC,CAAC;wBAED,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,kBAAkB,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,CAAC,IAAI,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;4BACjH,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;wBACrD,CAAC;6BAAM,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,UAAU,CAAC,IAAI,KAAK,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;4BAC/H,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBACtD,CAAC;6BAAM,IAAI,UAAU,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;4BACpD,UAAU,CAAC,YAAsB,CAAC,OAAO,CAAC,CAAC,IAAS,EAAE,EAAE;gCACvD,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY;oCAAE,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;4BACnF,CAAC,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACxC,MAAM,QAAQ,GAAI,IAAI,CAAC,eAAyB,CAAC,IAAI,CAAC,CAAC,OAAY,EAAE,EAAE,CACrE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACjC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC/B,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC3C,CAAC;gBAEF,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;wBACvC,IAAI,CAAC,YAAsB,CAAC,OAAO,CAAC,CAAC,IAAS,EAAE,EAAE;4BACjD,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY;gCAAE,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;wBACnF,CAAC,CAAC,CAAC;oBACL,CAAC;yBAAM,IACL,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC;wBACzE,IAAI,CAAC,EAAE,EAAE,IAAI,EACb,CAAC;wBACD,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBAC/C,CAAC;yBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACtE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAkB,CAAC;wBACrC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;4BACvC,IAAI,CAAC,YAAsB,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE;gCAC9C,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY;oCAAE,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;4BAC7E,CAAC,CAAC,CAAC;wBACL,CAAC;6BAAM,IACL,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC;4BACzE,IAAI,CAAC,EAAE,EAAE,IAAI,EACb,CAAC;4BACD,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;wBAC/C,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,IAAI,eAAe,GAAU,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACxC,eAAe,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACtG,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC;YACxD,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;oBACnC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;oBAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;oBAEvB,MAAM,SAAS,GACb,IAAI,EAAE,IAAI,KAAK,gBAAgB;wBAC/B,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,kBAAkB;4BACxC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC;4BAC1E,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,YAAY;gCAClC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAEvE,IAAI,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5C,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yFAAyF;YACzF,IAAI,cAAc,GAAQ,IAAI,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBAC5E,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;iBAAM,IACL,IAAI,CAAC,IAAI,KAAK,wBAAwB;gBACtC,IAAI,CAAC,WAAW;gBAChB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,kBAAkB,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,qBAAqB,CAAC,EACjG,CAAC;gBACD,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YAED,IAAI,cAAc,EAAE,EAAE,EAAE,IAAI,IAAI,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,0BAA0B,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC1C,IACE,CAAC,YAAY,CAAC,IAAI,IAAI,0BAA0B,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBACxE,CAAC,YAAY,CAAC,UAAU,IAAI,0BAA0B,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,EACpF,CAAC;oBACD,YAAY,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/layer6.d.ts

@@ -1,26 +0,0 @@
-import type { AnalysisContext, Finding } from './types.js';
-export interface DtsExportGraph {
-    filePath: string;
-    exportedTypes: Set<string>;
-    hasModuleAugmentation: boolean;
-}
-export interface DependencyNode {
-    name: string;
-    version: string;
-    dependencies: Set<string>;
-}
-/**
- * Parses a library's entry point `.d.ts` file using yuku-parser.
- * Handles Windows & POSIX paths natively.
- * Replaces the previous SWC-based implementation.
- */
-export declare function parseDtsWithSwc(entryPointRelative: string): Promise<DtsExportGraph>;
-/**
- * Fast-path topology extraction from lockfiles.
- */
-export declare function buildLockfileGraph(projectRoot: string): Map<string, DependencyNode>;
-/**
- * Layer 6: Dependency & Boundary Engine
- * Audits package usage and refines Layer 5 protections.
- */
-export declare function analyzeLayer6(context: AnalysisContext): Promise<Finding[]>;

package/dist/layer6.js

@@ -1,268 +0,0 @@
-import fs from 'node:fs';
-import path from 'pathe';
-import { parse as yukuParse } from 'yuku-parser';
-import * as yaml from 'js-yaml';
-import { readJsonFile } from './fs-utils.js';
-/**
- * Parses a library's entry point `.d.ts` file using yuku-parser.
- * Handles Windows & POSIX paths natively.
- * Replaces the previous SWC-based implementation.
- */
-export async function parseDtsWithSwc(entryPointRelative) {
-    const absolutePath = path.resolve(entryPointRelative);
-    if (!fs.existsSync(absolutePath)) {
-        return { filePath: absolutePath, exportedTypes: new Set(), hasModuleAugmentation: false };
-    }
-    const source = fs.readFileSync(absolutePath, 'utf-8');
-    // yuku-parser: use 'dts' lang for declaration files
-    const result = yukuParse(source, { lang: 'dts', sourceType: 'module' });
-    const program = result.program;
-    const exportedTypes = new Set();
-    let hasModuleAugmentation = false;
-    for (const item of (program.body ?? [])) {
-        // yuku-parser emits ESTree-compatible nodes (ExportNamedDeclaration, ExportDefaultDeclaration)
-        if (item.type === 'ExportNamedDeclaration') {
-            // Inline declaration: export interface Foo {}, export type Bar = ...
-            if (item.declaration) {
-                const decl = item.declaration;
-                if (decl.id?.name) {
-                    exportedTypes.add(decl.id.name);
-                }
-            }
-            // Re-export specifiers: export { Foo, Bar }
-            for (const spec of (item.specifiers ?? [])) {
-                if (spec.type === 'ExportSpecifier') {
-                    const name = spec.exported?.name ?? spec.local?.name;
-                    if (name)
-                        exportedTypes.add(name);
-                }
-            }
-        }
-        else if (item.type === 'ExportDefaultDeclaration') {
-            exportedTypes.add('default');
-        }
-        // Detect ambient module augmentation: declare module "..."
-        if (item.type === 'TSModuleDeclaration' ||
-            (item.type === 'ExportNamedDeclaration' && item.declaration?.type === 'TSModuleDeclaration')) {
-            hasModuleAugmentation = true;
-        }
-    }
-    return {
-        filePath: absolutePath,
-        exportedTypes,
-        hasModuleAugmentation,
-    };
-}
-/**
- * Fast-path topology extraction from lockfiles.
- */
-export function buildLockfileGraph(projectRoot) {
-    const graph = new Map();
-    const pnpmLockPath = path.join(projectRoot, 'pnpm-lock.yaml');
-    const packageLockPath = path.join(projectRoot, 'package-lock.json');
-    if (fs.existsSync(packageLockPath)) {
-        try {
-            const raw = fs.readFileSync(packageLockPath, 'utf-8');
-            const cleanRaw = raw.charCodeAt(0) === 0xFEFF ? raw.slice(1) : raw;
-            const parsed = JSON.parse(cleanRaw);
-            const packages = parsed.packages || {};
-            for (const [pkgPath, meta] of Object.entries(packages)) {
-                if (!pkgPath)
-                    continue;
-                const cleanName = pkgPath.replace(/^node_modules\//, '');
-                const deps = new Set(Object.keys(meta.dependencies || {}).concat(Object.keys(meta.peerDependencies || {})));
-                graph.set(cleanName, {
-                    name: cleanName,
-                    version: meta.version || 'unknown',
-                    dependencies: deps,
-                });
-            }
-        }
-        catch (e) {
-            // Ignore lockfile parse errors
-        }
-    }
-    else if (fs.existsSync(pnpmLockPath)) {
-        try {
-            const raw = fs.readFileSync(pnpmLockPath, 'utf-8');
-            const parsed = yaml.load(raw);
-            const snapshots = parsed.snapshots || {};
-            for (const [pkgId, meta] of Object.entries(snapshots)) {
-                const nameMatch = pkgId.match(/^\/(@?[^@]+)/);
-                const cleanName = (nameMatch ? nameMatch[1] : pkgId);
-                const deps = new Set(Object.keys(meta.dependencies || {}).concat(Object.keys(meta.peerDependencies || {})));
-                graph.set(cleanName, {
-                    name: cleanName,
-                    version: 'pnpm-managed',
-                    dependencies: deps,
-                });
-            }
-        }
-        catch (e) {
-            // Ignore lockfile parse errors
-        }
-    }
-    return graph;
-}
-/**
- * Layer 6: Dependency & Boundary Engine
- * Audits package usage and refines Layer 5 protections.
- */
-export async function analyzeLayer6(context) {
-    const findings = [];
-    const projectRoot = context.options.rootDir;
-    // 1. Audit declared dependencies vs imported ones
-    const lockfileGraph = buildLockfileGraph(projectRoot);
-    // Track imports per-package for monorepos, or globally for simple repos
-    const packageImportMap = new Map();
-    const globalImports = new Set();
-    for (const module of context.modules.values()) {
-        // Determine which workspace this module belongs to
-        let ownerPackage = 'root';
-        if (context.options.monorepo) {
-            for (const [name, pkg] of context.options.monorepo.packageMap.entries()) {
-                if (module.id.startsWith(pkg.location + path.sep) || module.id === pkg.location) {
-                    ownerPackage = name;
-                    break;
-                }
-            }
-        }
-        const pkgImports = packageImportMap.get(ownerPackage) || new Set();
-        if (!packageImportMap.has(ownerPackage))
-            packageImportMap.set(ownerPackage, pkgImports);
-        for (const edge of module.edges) {
-            if (edge.resolution === 'external') {
-                const parts = edge.rawSpecifier.split('/');
-                const pkgName = edge.rawSpecifier.startsWith('@') ? `${parts[0] ?? ''}/${parts[1] ?? ''}` : (parts[0] ?? '');
-                pkgImports.add(pkgName);
-                globalImports.add(pkgName);
-            }
-            else if (edge.resolution === 'resolved' && edge.target && context.options.monorepo) {
-                for (const [pkgName, pkg] of context.options.monorepo.packageMap.entries()) {
-                    if (edge.target.startsWith(pkg.location + path.sep) || edge.target === pkg.location) {
-                        pkgImports.add(pkgName);
-                        globalImports.add(pkgName);
-                        break;
-                    }
-                }
-            }
-        }
-    }
-    // Find unused direct dependencies from all package.json files
-    const manifestPaths = new Map();
-    manifestPaths.set('root', path.join(projectRoot, 'package.json'));
-    if (context.options.monorepo) {
-        for (const [name, pkg] of context.options.monorepo.packageMap.entries()) {
-            manifestPaths.set(name, pkg.manifestPath);
-        }
-    }
-    for (const [pkgName, manifestPath] of manifestPaths.entries()) {
-        if (fs.existsSync(manifestPath)) {
-            const pkg = await readJsonFile(manifestPath);
-            if (!pkg)
-                continue;
-            const dependencies = pkg.dependencies || {};
-            const devDependencies = pkg.devDependencies || {};
-            const scripts = pkg.scripts || {};
-            const relativeManifest = path.posix.relative(projectRoot, manifestPath);
-            const importedInThisPackage = packageImportMap.get(pkgName) || new Set();
-            // 1. Collect binary usages from scripts
-            const scriptUsages = new Set();
-            for (const script of Object.values(scripts)) {
-                // Better heuristic: find all potential binaries
-                const words = script.split(/[\s|&;><!]/).filter(w => w.length > 0 && !w.startsWith('-'));
-                for (const word of words) {
-                    scriptUsages.add(word);
-                }
-                // Specifically check for npx/pnpm/yarn/npm exec patterns
-                const execMatches = script.matchAll(/(?:npx|pnpm|yarn|npm)\s+([@\w\-/]+)/g);
-                for (const match of execMatches) {
-                    if (match[1])
-                        scriptUsages.add(match[1]);
-                }
-            }
-            // 2. Audit Dependencies
-            for (const dep of Object.keys(dependencies)) {
-                // In monorepo, we check if it's used in this package OR if it's a workspace package used elsewhere
-                const isUsed = importedInThisPackage.has(dep) || scriptUsages.has(dep);
-                if (!isUsed) {
-                    findings.push({
-                        rule: 'unused-export',
-                        severity: 'warning',
-                        confidence: 'high',
-                        message: `Package '${dep}' is declared as a dependency in ${relativeManifest} but never imported or used in scripts.`,
-                        file: relativeManifest,
-                        evidence: { package: dep, type: 'dependency' }
-                    });
-                }
-            }
-            // 3. Audit DevDependencies
-            for (const dep of Object.keys(devDependencies)) {
-                // Prevent self-reporting (ignore the package's own name if listed in devDeps)
-                if (pkg.name && dep === pkg.name) {
-                    continue;
-                }
-                // Special handling for @types/
-                if (dep.startsWith('@types/')) {
-                    const basePkg = dep.slice(7).replace('__', '/');
-                    if (importedInThisPackage.has(basePkg) || globalImports.has(basePkg) || dependencies[basePkg] || devDependencies[basePkg]) {
-                        continue;
-                    }
-                }
-                // Refined Whitelist for config/tooling packages
-                // We only whitelist very core tools that are almost always implicitly used
-                const CORE_TOOLING = [
-                    'optiprune', 'typescript', 'ts-node', 'tsx', 'babel', 'swc',
-                    'eslint', 'prettier', 'husky', 'lint-staged',
-                    'vitest', 'jest', 'cypress', 'playwright',
-                    '@types/node', '@types/react', '@types/react-dom', '@types/jest'
-                ];
-                const isCoreTool = CORE_TOOLING.some(p => dep.includes(p));
-                // Heuristic: Check for common config files in root
-                const commonConfigs = [
-                    '.eslintrc', '.prettierrc', 'vitest.config', 'jest.config', 'webpack.config', 'vite.config', 'rollup.config',
-                    'postcss.config', 'tailwind.config', 'tsconfig.json', 'babel.config', 'swc.config', 'lerna.json', 'turbo.json',
-                    'nx.json', '.env', 'svelte.config', 'vue.config', 'astro.config', 'package.json'
-                ];
-                const hasRelatedConfig = commonConfigs.some(cfg => {
-                    const depBase = dep.split('/')[0]?.replace(/^@/, '').replace(/-config$/, '').replace(/config-/, '');
-                    // If the dependency name (or part of it) is found in a config file name, it's likely used
-                    return cfg.includes(depBase || '___never___');
-                });
-                const isUsed = importedInThisPackage.has(dep) || scriptUsages.has(dep) || isCoreTool || hasRelatedConfig;
-                if (!isUsed) {
-                    findings.push({
-                        rule: 'unused-export',
-                        severity: 'info', // devDeps are usually less critical
-                        confidence: 'medium',
-                        message: `DevDependency '${dep}' in ${relativeManifest} appears unused.`,
-                        file: relativeManifest,
-                        evidence: { package: dep, type: 'devDependency' }
-                    });
-                }
-            }
-        }
-    }
-    // 2. Refine Layer 5 Protection
-    for (const module of context.modules.values()) {
-        const isReachable = context.reachable.has(module.id) || context.maybeReachable.has(module.id);
-        if (!isReachable) {
-            for (const exp of module.exports) {
-                if (exp.isExternalContract) {
-                    findings.push({
-                        rule: 'protected-contract',
-                        severity: 'info',
-                        confidence: 'high',
-                        message: `[Layer 6] Revoked protection for unreferenced contract: ${exp.exportedAs} (File is unreachable).`,
-                        file: module.relativePath,
-                        ...(exp.location !== undefined && { location: exp.location }),
-                        evidence: { symbol: exp.exportedAs, reason: 'unreachable-file' }
-                    });
-                    exp.isExternalContract = false;
-                }
-            }
-        }
-    }
-    return findings;
-}
-//# sourceMappingURL=layer6.js.map

package/dist/layer6.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"layer6.js","sourceRoot":"","sources":["../src/layer6.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,OAAO,CAAC;AACzB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAe7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,kBAA0B;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACtD,oDAAoD;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAc,CAAC;IAEtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAU,EAAE,CAAC;QACjD,+FAA+F;QAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC3C,qEAAqE;YACrE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAkB,CAAC;gBACrC,IAAI,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;oBAClB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,4CAA4C;YAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAU,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC;oBACrD,IAAI,IAAI;wBAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B,EAAE,CAAC;YACpD,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAED,2DAA2D;QAC3D,IACE,IAAI,CAAC,IAAI,KAAK,qBAAqB;YACnC,CAAC,IAAI,CAAC,IAAI,KAAK,wBAAwB,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,qBAAqB,CAAC,EAC5F,CAAC;YACD,qBAAqB,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,aAAa;QACb,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAEpE,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YAEvC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAM,QAAQ,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CACtF,CAAC;gBAEF,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE;oBACnB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,SAAS;oBAClC,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,+BAA+B;QACjC,CAAC;IACH,CAAC;SAAM,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAQ,CAAC;YACrC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YAEzC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAM,SAAS,CAAC,EAAE,CAAC;gBAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAW,CAAC;gBAE/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CACtF,CAAC;gBAEF,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE;oBACnB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,cAAc;oBACvB,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,+BAA+B;QACjC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAwB;IAC1D,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;IAE5C,kDAAkD;IAClD,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAEtD,wEAAwE;IACxE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,mDAAmD;QACnD,IAAI,YAAY,GAAG,MAAM,CAAC;QAC1B,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxE,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAChF,YAAY,GAAG,IAAI,CAAC;oBACpB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAExF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7G,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxB,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrF,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;wBACpF,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBACxB,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBAC3B,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACxE,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAsB,YAAY,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;YAC5C,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAExE,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAEjF,wCAAwC;YACxC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;YACvC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,EAAE,CAAC;gBACxD,gDAAgD;gBAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;gBAED,yDAAyD;gBACzD,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC;gBAC5E,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;oBAChC,IAAI,KAAK,CAAC,CAAC,CAAC;wBAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAED,wBAAwB;YACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC5C,mGAAmG;gBACnG,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,eAAe;wBACrB,QAAQ,EAAE,SAAS;wBACnB,UAAU,EAAE,MAAM;wBAClB,OAAO,EAAE,YAAY,GAAG,oCAAoC,gBAAgB,yCAAyC;wBACrH,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;qBAC/C,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/C,8EAA8E;gBAC9E,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;oBACjC,SAAS;gBACX,CAAC;gBAED,+BAA+B;gBAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBAChD,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC1H,SAAS;oBACX,CAAC;gBACH,CAAC;gBAED,gDAAgD;gBAChD,2EAA2E;gBAC3E,MAAM,YAAY,GAAG;oBACnB,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;oBAC3D,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa;oBAC5C,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY;oBACzC,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa;iBACjE,CAAC;gBAEF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE3D,mDAAmD;gBACnD,MAAM,aAAa,GAAG;oBACpB,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe;oBAC5G,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY;oBAC9G,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc;iBACjF,CAAC;gBAEF,MAAM,gBAAgB,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBAChD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBACpG,0FAA0F;oBAC1F,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC;gBAChD,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,IAAI,gBAAgB,CAAC;gBAEzG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,eAAe;wBACrB,QAAQ,EAAE,MAAM,EAAE,oCAAoC;wBACtD,UAAU,EAAE,QAAQ;wBACpB,OAAO,EAAE,kBAAkB,GAAG,QAAQ,gBAAgB,kBAAkB;wBACxE,IAAI,EAAE,gBAAgB;wBACtB,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE;qBAClD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;oBAC3B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,oBAAoB;wBAC1B,QAAQ,EAAE,MAAM;wBAChB,UAAU,EAAE,MAAM;wBAClB,OAAO,EAAE,2DAA2D,GAAG,CAAC,UAAU,yBAAyB;wBAC3G,IAAI,EAAE,MAAM,CAAC,YAAY;wBACzB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC7D,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE;qBACjE,CAAC,CAAC;oBACH,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/layer7.d.ts

@@ -1,28 +0,0 @@
-import type { AnalysisContext, Finding } from "./types.js";
-export interface Layer7Result {
-    layer: 7;
-    implicitEdges: ImplicitEdge[];
-    resolvedDynamicImports: ResolvedDynamicImport[];
-}
-export interface ImplicitEdge {
-    id: string;
-    type: 'DI_INJECTION' | 'EVENT_CONTRACT';
-    provider?: {
-        file: string;
-        symbol: string;
-        token: string;
-    };
-    consumer: {
-        file: string;
-        symbol: string;
-        handler?: string;
-    };
-    topic?: string;
-    status: 'ACTIVE' | 'DEAD_ORPHANED_CONSUMER';
-}
-export interface ResolvedDynamicImport {
-    sourceFile: string;
-    template: string;
-    resolvedFiles: string[];
-}
-export declare function analyzeLayer7(context: AnalysisContext): Promise<Finding[]>;