projscan 4.4.0 → 4.6.0

package/dist/core/astModuleSignals.js

@@ -0,0 +1,140 @@
+export function visitTopLevel(node, imports, exports) {
+    switch (node.type) {
+        case 'ImportDeclaration': {
+            imports.push(importFromNode(node));
+            return;
+        }
+        case 'ExportNamedDeclaration': {
+            collectNamedExport(node, exports, imports);
+            return;
+        }
+        case 'ExportDefaultDeclaration': {
+            exports.push({
+                name: 'default',
+                kind: 'default',
+                typeOnly: false,
+                line: node.loc?.start.line ?? 0,
+            });
+            return;
+        }
+        case 'ExportAllDeclaration': {
+            const source = node.source.value;
+            imports.push({
+                source,
+                kind: 'reexport',
+                specifiers: [],
+                typeOnly: Boolean(node.exportKind === 'type'),
+                line: node.loc?.start.line ?? 0,
+            });
+            return;
+        }
+        default:
+            return;
+    }
+}
+function importFromNode(node) {
+    const specifiers = node.specifiers.map((s) => {
+        if (s.type === 'ImportDefaultSpecifier')
+            return 'default';
+        if (s.type === 'ImportNamespaceSpecifier')
+            return '*';
+        if (s.type === 'ImportSpecifier') {
+            const imported = s.imported;
+            if (imported.type === 'Identifier')
+                return imported.name;
+            return imported.value;
+        }
+        return '';
+    });
+    return {
+        source: node.source.value,
+        kind: 'static',
+        specifiers: specifiers.filter(Boolean),
+        typeOnly: node.importKind === 'type',
+        line: node.loc?.start.line ?? 0,
+    };
+}
+function collectNamedExport(node, exports, imports) {
+    const reexport = namedReexportImport(node);
+    if (reexport)
+        imports.push(reexport);
+    if (node.declaration) {
+        const typeOnly = node.exportKind === 'type';
+        const line = node.declaration.loc?.start.line ?? node.loc?.start.line ?? 0;
+        collectInlineExportDeclaration(node.declaration, exports, typeOnly, line);
+        return;
+    }
+    collectLocalExportSpecifiers(node, exports);
+}
+function namedReexportImport(node) {
+    if (!node.source)
+        return null;
+    return {
+        source: node.source.value,
+        kind: 'reexport',
+        specifiers: exportSpecifierNames(node.specifiers),
+        typeOnly: node.exportKind === 'type',
+        line: node.loc?.start.line ?? 0,
+    };
+}
+function exportSpecifierNames(specifiers) {
+    return specifiers.flatMap((specifier) => {
+        const name = exportSpecifierName(specifier);
+        return name ? [name] : [];
+    });
+}
+function exportSpecifierName(specifier) {
+    if (specifier.type !== 'ExportSpecifier')
+        return null;
+    const exported = specifier.exported;
+    return exported.type === 'Identifier' ? exported.name : exported.value;
+}
+function collectInlineExportDeclaration(declaration, exports, typeOnly, line) {
+    switch (declaration.type) {
+        case 'FunctionDeclaration':
+            pushIdExport(exports, declaration.id?.name, 'function', typeOnly, line);
+            return;
+        case 'ClassDeclaration':
+            pushIdExport(exports, declaration.id?.name, 'class', typeOnly, line);
+            return;
+        case 'VariableDeclaration':
+            collectVariableExports(declaration, exports, typeOnly, line);
+            return;
+        case 'TSInterfaceDeclaration':
+            pushIdExport(exports, declaration.id.name, 'interface', true, line);
+            return;
+        case 'TSTypeAliasDeclaration':
+            pushIdExport(exports, declaration.id.name, 'type', true, line);
+            return;
+        case 'TSEnumDeclaration':
+            pushIdExport(exports, declaration.id.name, 'enum', typeOnly, line);
+            return;
+        default:
+            return;
+    }
+}
+function collectVariableExports(declaration, exports, typeOnly, line) {
+    for (const decl of declaration.declarations) {
+        if (decl.id.type === 'Identifier') {
+            pushIdExport(exports, decl.id.name, 'variable', typeOnly, line);
+        }
+    }
+}
+function collectLocalExportSpecifiers(node, exports) {
+    for (const spec of node.specifiers) {
+        const name = exportSpecifierName(spec);
+        if (!name)
+            continue;
+        exports.push({
+            name,
+            kind: 'unknown',
+            typeOnly: node.exportKind === 'type',
+            line: spec.loc?.start.line ?? node.loc?.start.line ?? 0,
+        });
+    }
+}
+function pushIdExport(exports, name, kind, typeOnly, line) {
+    if (name)
+        exports.push({ name, kind, typeOnly, line });
+}
+//# sourceMappingURL=astModuleSignals.js.map

package/dist/core/astModuleSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astModuleSignals.js","sourceRoot":"","sources":["../../src/core/astModuleSignals.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,OAAoB,EAAE,OAAoB;IACvF,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,KAAK,wBAAwB,CAAC,CAAC,CAAC;YAC9B,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;aAChC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,OAAO,CAAE,IAAgC,CAAC,UAAU,KAAK,MAAM,CAAC;gBAC1E,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;aAChC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAuB;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,wBAAwB;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,0BAA0B;YAAE,OAAO,GAAG,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC5B,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;YACzD,OAAQ,QAA0B,CAAC,KAAK,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAG,IAAI,CAAC,MAAwB,CAAC,KAAK;QAC5C,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QACtC,QAAQ,EAAE,IAAI,CAAC,UAAU,KAAK,MAAM;QACpC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,IAA4B,EAC5B,OAAoB,EACpB,OAAoB;IAEpB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAC3E,8BAA8B,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,4BAA4B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA4B;IACvD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,MAAM,EAAG,IAAI,CAAC,MAAwB,CAAC,KAAK;QAC5C,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;QACjD,QAAQ,EAAE,IAAI,CAAC,UAAU,KAAK,MAAM;QACpC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAgD;IAC5E,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAuD;IAEvD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACpC,OAAO,QAAQ,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,QAA0B,CAAC,KAAK,CAAC;AAC5F,CAAC;AAED,SAAS,8BAA8B,CACrC,WAA+D,EAC/D,OAAoB,EACpB,QAAiB,EACjB,IAAY;IAEZ,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,qBAAqB;YACxB,YAAY,CAAC,OAAO,EAAG,WAAmC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACjG,OAAO;QACT,KAAK,kBAAkB;YACrB,YAAY,CAAC,OAAO,EAAG,WAAgC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC3F,OAAO;QACT,KAAK,qBAAqB;YACxB,sBAAsB,CAAC,WAAkC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpF,OAAO;QACT,KAAK,wBAAwB;YAC3B,YAAY,CAAC,OAAO,EAAG,WAAsC,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAChG,OAAO;QACT,KAAK,wBAAwB;YAC3B,YAAY,CAAC,OAAO,EAAG,WAAsC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3F,OAAO;QACT,KAAK,mBAAmB;YACtB,YAAY,CAAC,OAAO,EAAG,WAAiC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1F,OAAO;QACT;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAgC,EAChC,OAAoB,EACpB,QAAiB,EACjB,IAAY;IAEZ,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,YAAY,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,YAAY,CAAC,OAAO,EAAG,IAAI,CAAC,EAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CAAC,IAA4B,EAAE,OAAoB;IACtF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,IAAI,CAAC,UAAU,KAAK,MAAM;YACpC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,OAAoB,EACpB,IAAwB,EACxB,IAAgB,EAChB,QAAiB,EACjB,IAAY;IAEZ,IAAI,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/core/astParser.d.ts

@@ -0,0 +1,11 @@
+import type { File } from '@babel/types';
+export type ParseBabelResult = {
+    ok: true;
+    ast: File;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Is this a file we should try to AST-parse at all? */
+export declare function isParseable(filePath: string): boolean;
+export declare function parseBabelFile(filePath: string, content: string): ParseBabelResult;

package/dist/core/astParser.js

@@ -0,0 +1,38 @@
+import { parse } from '@babel/parser';
+import path from 'node:path';
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.mts', '.cts']);
+const TYPESCRIPT_EXTENSIONS = new Set(['.ts', '.tsx', '.mts', '.cts']);
+const JSX_EXTENSIONS = new Set(['.tsx', '.jsx']);
+/** Is this a file we should try to AST-parse at all? */
+export function isParseable(filePath) {
+    return SOURCE_EXTENSIONS.has(path.extname(filePath).toLowerCase());
+}
+export function parseBabelFile(filePath, content) {
+    try {
+        const ast = parse(content, {
+            sourceType: 'module',
+            allowImportExportEverywhere: true,
+            allowAwaitOutsideFunction: true,
+            allowReturnOutsideFunction: true,
+            allowSuperOutsideMethod: true,
+            errorRecovery: true,
+            plugins: parserPluginsForFile(filePath),
+        });
+        return { ok: true, ast };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { ok: false, reason: `parse error: ${msg.slice(0, 120)}` };
+    }
+}
+function parserPluginsForFile(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    const plugins = [];
+    if (TYPESCRIPT_EXTENSIONS.has(ext))
+        plugins.push('typescript');
+    if (JSX_EXTENSIONS.has(ext))
+        plugins.push('jsx');
+    plugins.push('decorators-legacy', 'dynamicImport', 'topLevelAwait');
+    return plugins;
+}
+//# sourceMappingURL=astParser.js.map

package/dist/core/astParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astParser.js","sourceRoot":"","sources":["../../src/core/astParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAsB,MAAM,eAAe,CAAC;AAE1D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAClG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACvE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAIjD,wDAAwD;AACxD,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE;YACzB,UAAU,EAAE,QAAQ;YACpB,2BAA2B,EAAE,IAAI;YACjC,yBAAyB,EAAE,IAAI;YAC/B,0BAA0B,EAAE,IAAI;YAChC,uBAAuB,EAAE,IAAI;YAC7B,aAAa,EAAE,IAAI;YACnB,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/astProgramSignals.d.ts

@@ -0,0 +1,11 @@
+import type { Node } from '@babel/types';
+import type { AstImport } from './astTypes.js';
+export declare function collectProgramSignals(program: Node, imports: AstImport[], callSites: string[]): number;
+export declare function childAstNodes(node: Node): Node[];
+export declare function isAstNode(value: unknown): value is Node;
+/**
+ * McCabe decision points for JavaScript/TypeScript. Default switch cases and
+ * optional-chaining do NOT count - this matches eslint's `complexity` rule
+ * and most static analyzers.
+ */
+export declare function isDecisionPoint(n: Node): boolean;

package/dist/core/astProgramSignals.js

@@ -0,0 +1,97 @@
+import { babelCalleeName } from './astMembers.js';
+export function collectProgramSignals(program, imports, callSites) {
+    let decisionPoints = 0;
+    walk(program, (node) => {
+        collectCallExpressionSignals(node, imports, callSites);
+        if (isDecisionPoint(node))
+            decisionPoints++;
+    });
+    return decisionPoints;
+}
+function collectCallExpressionSignals(node, imports, callSites) {
+    if (node.type !== 'CallExpression')
+        return;
+    const callee = node.callee;
+    const name = babelCalleeName(callee);
+    if (name)
+        callSites.push(name);
+    collectCallExpressionImport(node, callee, imports);
+}
+function collectCallExpressionImport(node, callee, imports) {
+    const source = firstStringLiteralArgument(node);
+    if (!source)
+        return;
+    if (callee?.type === 'Import') {
+        imports.push(importFromCallExpression(source, 'dynamic', node));
+        return;
+    }
+    if (callee?.type === 'Identifier' && callee.name === 'require') {
+        imports.push(importFromCallExpression(source, 'require', node));
+    }
+}
+function firstStringLiteralArgument(node) {
+    const arg = node.arguments?.[0];
+    return arg?.type === 'StringLiteral' ? arg.value : null;
+}
+function importFromCallExpression(source, kind, node) {
+    return {
+        source,
+        kind,
+        specifiers: [],
+        typeOnly: false,
+        line: node.loc?.start.line ?? 0,
+    };
+}
+const NON_CHILD_KEYS = new Set(['loc', 'range', 'leadingComments', 'trailingComments']);
+export function childAstNodes(node) {
+    const children = [];
+    for (const key of Object.keys(node)) {
+        if (NON_CHILD_KEYS.has(key))
+            continue;
+        children.push(...astNodesFromValue(node[key]));
+    }
+    return children;
+}
+function astNodesFromValue(value) {
+    if (!value)
+        return [];
+    if (Array.isArray(value))
+        return value.filter(isAstNode);
+    return isAstNode(value) ? [value] : [];
+}
+export function isAstNode(value) {
+    return Boolean(value && typeof value === 'object' && 'type' in value);
+}
+const DECISION_NODE_TYPES = new Set([
+    'IfStatement',
+    'ConditionalExpression',
+    'ForStatement',
+    'ForInStatement',
+    'ForOfStatement',
+    'WhileStatement',
+    'DoWhileStatement',
+    'CatchClause',
+]);
+const DECISION_LOGICAL_OPERATORS = new Set(['&&', '||', '??']);
+/**
+ * McCabe decision points for JavaScript/TypeScript. Default switch cases and
+ * optional-chaining do NOT count - this matches eslint's `complexity` rule
+ * and most static analyzers.
+ */
+export function isDecisionPoint(n) {
+    if (DECISION_NODE_TYPES.has(n.type))
+        return true;
+    if (n.type === 'SwitchCase')
+        return n.test !== null;
+    if (n.type !== 'LogicalExpression')
+        return false;
+    return DECISION_LOGICAL_OPERATORS.has(n.operator);
+}
+function walk(node, visit) {
+    if (!node || typeof node !== 'object')
+        return;
+    visit(node);
+    for (const child of childAstNodes(node))
+        walk(child, visit);
+}
+//# sourceMappingURL=astProgramSignals.js.map

package/dist/core/astProgramSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astProgramSignals.js","sourceRoot":"","sources":["../../src/core/astProgramSignals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,UAAU,qBAAqB,CACnC,OAAa,EACb,OAAoB,EACpB,SAAmB;IAEnB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACrB,4BAA4B,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,cAAc,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,4BAA4B,CACnC,IAAU,EACV,OAAoB,EACpB,SAAmB;IAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO;IAC3C,MAAM,MAAM,GAAI,IAA0B,CAAC,MAAM,CAAC;IAClD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI;QAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAU,EACV,MAAwB,EACxB,OAAoB;IAEpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,IAAI,MAAM,EAAE,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAU;IAC5C,MAAM,GAAG,GAAI,IAA+B,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,GAAG,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAE,GAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAc,EACd,IAA2B,EAC3B,IAAU;IAEV,OAAO;QACL,MAAM;QACN,IAAI;QACJ,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,KAAK;QACf,IAAI,EAAG,IAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAExF,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,MAAM,QAAQ,GAAW,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAE,IAA2C,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,aAAa;IACb,uBAAuB;IACvB,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;CACd,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAO;IACrC,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAQ,CAAuB,CAAC,IAAI,KAAK,IAAI,CAAC;IAC3E,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,0BAA0B,CAAC,GAAG,CAAE,CAA0B,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,IAAI,CAAC,IAAU,EAAE,KAAwB;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IAC9C,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/dist/core/astTypes.d.ts

@@ -0,0 +1,78 @@
+export type SymbolKind = 'function' | 'class' | 'variable' | 'type' | 'interface' | 'enum' | 'default' | 'unknown';
+export interface AstImport {
+    source: string;
+    kind: 'static' | 'dynamic' | 'require' | 'reexport';
+    specifiers: string[];
+    typeOnly: boolean;
+    line: number;
+}
+export interface AstExport {
+    name: string;
+    kind: SymbolKind;
+    typeOnly: boolean;
+    line: number;
+}
+/**
+ * Per-function cyclomatic complexity entry. `name` is qualified with the
+ * containing class for methods (`Class.method`), bare for top-level functions,
+ * and `<anonymous>` for unnamed function expressions / arrows assigned to
+ * non-trivially-named bindings.
+ */
+export interface FunctionInfo {
+    name: string;
+    /** 1-based start line (function keyword / arrow). */
+    line: number;
+    /** 1-based end line. Equal to `line` for adapters that don't track end. */
+    endLine: number;
+    cyclomaticComplexity: number;
+    /**
+     * Approximate per-function fan-in (0.15.0+): count of OTHER files whose
+     * `callSites` includes this function's bare name. Populated post-parse in
+     * `buildCodeGraph`; absent right after `parse()` since it requires the
+     * full graph. Name-based: shared function names across files cannot be
+     * disambiguated and will be attributed to all definitions.
+     */
+    fanIn?: number;
+    /**
+     * Per-function call sites (1.2.0+): bare names of functions called from
+     * within this function's body. Nested functions / lambdas are NOT
+     * included (their calls fold into their own entries). Populated by each
+     * language adapter's per-function walker.
+     */
+    callSites?: string[];
+    /**
+     * Qualified member call sites for JavaScript/TypeScript functions, such as
+     * `request.json` or `db.query`. Bare `callSites` remains the stable
+     * cross-language field; this keeps receiver-sensitive checks precise.
+     */
+    memberCallSites?: string[];
+    /** Function parameter names when the adapter can recover them. */
+    parameters?: string[];
+    /** Bare identifier call sites, excluding member calls like cache.query(). */
+    directCallSites?: string[];
+    /** Local aliases for member functions, e.g. query=pool.query from const { query } = pool. */
+    memberAliases?: string[];
+    /** Qualified call expression this function was passed to, e.g. app.post for Express callbacks. */
+    contextualCallSite?: string;
+    /**
+     * Per-function fan-out (1.2.0+): count of distinct callee names from
+     * `callSites`, restricted to names that are defined as functions
+     * SOMEWHERE in the graph. External / library / unresolved calls do not
+     * count. Populated post-parse in `buildCodeGraph`.
+     */
+    fanOut?: number;
+    /**
+     * Per-function member-expression reads (1.6.0+): rightmost identifier
+     * of every `obj.prop` chain in the function body that is NOT in callee
+     * position. Used by taint analysis to detect property-shaped sources
+     * like `process.env.X` (captures `env` and `X`). Currently only the
+     * JavaScript/TypeScript adapter populates this; other adapters omit
+     * it and taint will only match call-shaped sources for those files.
+     */
+    references?: string[];
+    /**
+     * Qualified member-expression reads for JavaScript/TypeScript functions,
+     * e.g. `ctx.request.body`. Used when bare references are too ambiguous.
+     */
+    memberReferences?: string[];
+}

package/dist/core/astTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=astTypes.js.map

package/dist/core/astTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astTypes.js","sourceRoot":"","sources":["../../src/core/astTypes.ts"],"names":[],"mappings":""}

package/dist/core/codeGraph.d.ts

@@ -1,32 +1,7 @@
 import type { FileEntry } from '../types.js';
-import type { AstImport, AstExport, FunctionInfo } from './ast.js';
-export interface GraphFile {
-    relativePath: string;
-    imports: AstImport[];
-    exports: AstExport[];
-    callSites: string[];
-    lineCount: number;
-    /** File-level McCabe cyclomatic complexity from the adapter. 0 when unparsed. */
-    cyclomaticComplexity: number;
-    /**
-     * Per-function McCabe CC from the adapter (0.13.0+). Optional for
-     * backward compatibility with code paths that build GraphFile records
-     * without function metadata. Treat absence as "no per-function data".
-     */
-    functions?: FunctionInfo[];
-    mtimeMs: number;
-    parseOk: boolean;
-    parseReason?: string;
-    /** Adapter id that parsed this file. */
-    adapterId?: string;
-}
-export interface CodeGraph {
-    files: Map<string, GraphFile>;
-    packageImporters: Map<string, Set<string>>;
-    localImporters: Map<string, Set<string>>;
-    symbolDefs: Map<string, Set<string>>;
-    scannedFiles: number;
-}
+import type { AstImport, AstExport } from './ast.js';
+import type { CodeGraph, GraphFile } from './codeGraphTypes.js';
+export type { CodeGraph, GraphFile };
 export declare function buildCodeGraph(rootPath: string, files: FileEntry[], previousGraph?: CodeGraph): Promise<CodeGraph>;
 /**
  * Back-compat: convert a JS/TS import specifier to a bare package name.