tribunal-kit 5.7.0 → 5.8.0

package/.agent/scripts/dependency_analyzer.js

@@ -14,221 +14,312 @@
  *   node .agent/scripts/dependency_analyzer.js . --check-unused
  */
 
-'use strict';
+"use strict";
 
-const fs = require('fs');
-const path = require('path');
+const fs = require("fs");
+const path = require("path");
 
 const {
-    RED, GREEN, YELLOW, BLUE, BOLD, DIM, CYAN, RESET,
-    banner, sectionHeader, timer, formatMs,
-    ok, fail, warn, skip,
-} = require('./_colors');
-
-const { walkDir, loadJson, runCommand } = require('./_utils');
-
-const SOURCE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
+  BOLD,
+  DIM,
+  CYAN,
+  RESET,
+  banner,
+  sectionHeader,
+  timer,
+  formatMs,
+  ok,
+  fail,
+  warn,
+  skip,
+} = require("./_colors");
+
+const { walkDir, loadJson, runCommand } = require("./_utils");
+
+const SOURCE_EXTENSIONS = new Set([
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+]);
 
 const NODE_BUILTINS = new Set([
-    "fs", "path", "os", "crypto", "http", "https", "url", "util",
-    "stream", "events", "child_process", "cluster", "net", "dns",
-    "tls", "readline", "zlib", "buffer", "querystring", "string_decoder",
-    "assert", "perf_hooks", "worker_threads", "timers", "v8",
-    "node:fs", "node:path", "node:os", "node:crypto", "node:http",
-    "node:https", "node:url", "node:util", "node:stream", "node:events",
-    "node:child_process", "node:net", "node:dns", "node:tls",
-    "node:readline", "node:zlib", "node:buffer", "node:assert",
-    "node:perf_hooks", "node:worker_threads", "node:timers"
+  "fs",
+  "path",
+  "os",
+  "crypto",
+  "http",
+  "https",
+  "url",
+  "util",
+  "stream",
+  "events",
+  "child_process",
+  "cluster",
+  "net",
+  "dns",
+  "tls",
+  "readline",
+  "zlib",
+  "buffer",
+  "querystring",
+  "string_decoder",
+  "assert",
+  "perf_hooks",
+  "worker_threads",
+  "timers",
+  "v8",
+  "node:fs",
+  "node:path",
+  "node:os",
+  "node:crypto",
+  "node:http",
+  "node:https",
+  "node:url",
+  "node:util",
+  "node:stream",
+  "node:events",
+  "node:child_process",
+  "node:net",
+  "node:dns",
+  "node:tls",
+  "node:readline",
+  "node:zlib",
+  "node:buffer",
+  "node:assert",
+  "node:perf_hooks",
+  "node:worker_threads",
+  "node:timers",
 ]);
 
 function extractImports(projectRoot) {
-    const imports = new Set();
-    const importPatterns = [
-        /(?:import|export)\s+.*?\s+from\s+["']([^"'.][^"']*)["']/g,
-        /require\s*\(\s*["']([^"'.][^"']*)["']/g,
-        /import\s*\(\s*["']([^"'.][^"']*)["']/g
-    ];
-
-    // Use shared walkDir from _utils.js
-    const files = walkDir(projectRoot, { extensions: SOURCE_EXTENSIONS });
-
-    for (const fullPath of files) {
-        let content;
-        try { content = fs.readFileSync(fullPath, 'utf8'); } catch { continue; }
-
-        for (const pattern of importPatterns) {
-            // Reset regex state for each file
-            pattern.lastIndex = 0;
-            let match;
-            while ((match = pattern.exec(content)) !== null) {
-                let pkg = match[1];
-                if (pkg.startsWith("@")) {
-                    const parts = pkg.split("/");
-                    pkg = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : pkg;
-                } else {
-                    pkg = pkg.split("/")[0];
-                }
-                imports.add(pkg);
-            }
+  const imports = new Set();
+  const importPatterns = [
+    /(?:import|export)\s+.*?\s+from\s+["']([^"'.][^"']*)["']/g,
+    /require\s*\(\s*["']([^"'.][^"']*)["']/g,
+    /import\s*\(\s*["']([^"'.][^"']*)["']/g,
+  ];
+
+  // Use shared walkDir from _utils.js
+  const files = walkDir(projectRoot, { extensions: SOURCE_EXTENSIONS });
+
+  for (const fullPath of files) {
+    let content;
+    try {
+      content = fs.readFileSync(fullPath, "utf8");
+    } catch {
+      continue;
+    }
+
+    for (const pattern of importPatterns) {
+      // Reset regex state for each file
+      pattern.lastIndex = 0;
+      let match;
+      while ((match = pattern.exec(content)) !== null) {
+        let pkg = match[1];
+        if (pkg.startsWith("@")) {
+          const parts = pkg.split("/");
+          pkg = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : pkg;
+        } else {
+          pkg = pkg.split("/")[0];
         }
+        imports.add(pkg);
+      }
     }
+  }
 
-    return imports;
+  return imports;
 }
 
 function checkUnused(pkg, usedImports) {
-    const allDeps = new Set([
-        ...Object.keys(pkg.dependencies || {}),
-        ...Object.keys(pkg.devDependencies || {})
-    ]);
-
-    const implicitPackages = new Set([
-        "typescript", "eslint", "prettier", "vitest", "jest", "ts-node",
-        "@types/node", "@types/react", "tailwindcss", "postcss", "autoprefixer",
-        "nodemon", "tsx", "vite", "next", "webpack", "babel", "@babel/core"
-    ]);
-
-    const unused = [];
-    for (const d of allDeps) {
-        if (!implicitPackages.has(d) && !d.startsWith("@types/") && !usedImports.has(d)) {
-            unused.push(d);
-        }
+  const allDeps = new Set([
+    ...Object.keys(pkg.dependencies || {}),
+    ...Object.keys(pkg.devDependencies || {}),
+  ]);
+
+  const implicitPackages = new Set([
+    "typescript",
+    "eslint",
+    "prettier",
+    "vitest",
+    "jest",
+    "ts-node",
+    "@types/node",
+    "@types/react",
+    "tailwindcss",
+    "postcss",
+    "autoprefixer",
+    "nodemon",
+    "tsx",
+    "vite",
+    "next",
+    "webpack",
+    "babel",
+    "@babel/core",
+  ]);
+
+  const unused = [];
+  for (const d of allDeps) {
+    if (
+      !implicitPackages.has(d) &&
+      !d.startsWith("@types/") &&
+      !usedImports.has(d)
+    ) {
+      unused.push(d);
     }
-    return unused.sort();
+  }
+  return unused.sort();
 }
 
 function checkPhantom(pkg, usedImports) {
-    const allDeps = new Set([
-        ...Object.keys(pkg.dependencies || {}),
-        ...Object.keys(pkg.devDependencies || {})
-    ]);
-
-    const phantom = [];
-    for (const imp of usedImports) {
-        if (!NODE_BUILTINS.has(imp) && !allDeps.has(imp)) {
-            phantom.push(imp);
-        }
+  const allDeps = new Set([
+    ...Object.keys(pkg.dependencies || {}),
+    ...Object.keys(pkg.devDependencies || {}),
+  ]);
+
+  const phantom = [];
+  for (const imp of usedImports) {
+    if (!NODE_BUILTINS.has(imp) && !allDeps.has(imp)) {
+      phantom.push(imp);
     }
-    return phantom.sort();
+  }
+  return phantom.sort();
 }
 
 function runNpmAudit(projectRoot) {
-    const result = runCommand('npm', ['audit', '--json'], {
-        cwd: projectRoot,
-        timeout: 60000,
-    });
-
-    if (result.status === null && !result.stdout) {
-        skip("npm not installed — skipping audit");
-        return true;
+  const result = runCommand("npm", ["audit", "--json"], {
+    cwd: projectRoot,
+    timeout: 60000,
+  });
+
+  if (result.status === null && !result.stdout) {
+    skip("npm not installed — skipping audit");
+    return true;
+  }
+
+  try {
+    const auditData = JSON.parse(result.stdout);
+    const vulns =
+      (auditData.metadata && auditData.metadata.vulnerabilities) || {};
+    const critical = vulns.critical || 0;
+    const high = vulns.high || 0;
+    const moderate = vulns.moderate || 0;
+    const low = vulns.low || 0;
+
+    if (critical + high > 0) {
+      fail(
+        `npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`,
+      );
+      return false;
+    } else if (moderate + low > 0) {
+      warn(`npm audit: ${moderate} moderate, ${low} low vulnerabilities`);
+      return true;
+    } else {
+      ok("npm audit — no known vulnerabilities");
+      return true;
     }
-
-    try {
-        const auditData = JSON.parse(result.stdout);
-        const vulns = (auditData.metadata && auditData.metadata.vulnerabilities) || {};
-        const critical = vulns.critical || 0;
-        const high = vulns.high || 0;
-        const moderate = vulns.moderate || 0;
-        const low = vulns.low || 0;
-
-        if (critical + high > 0) {
-            fail(`npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`);
-            return false;
-        } else if (moderate + low > 0) {
-            warn(`npm audit: ${moderate} moderate, ${low} low vulnerabilities`);
-            return true;
-        } else {
-            ok("npm audit — no known vulnerabilities");
-            return true;
-        }
-    } catch {
-        if (result.ok) {
-            ok("npm audit — clean");
-            return true;
-        }
-        fail("npm audit returned errors");
-        return false;
+  } catch {
+    if (result.ok) {
+      ok("npm audit — clean");
+      return true;
     }
+    fail("npm audit returned errors");
+    return false;
+  }
 }
 
 function main() {
-    const args = process.argv.slice(2);
-    let targetPath = null;
-    let auditFlag = false;
-    let checkUnusedFlag = false;
-
-    for (let i = 0; i < args.length; i++) {
-        if (args[i] === '--audit') auditFlag = true;
-        else if (args[i] === '--check-unused') checkUnusedFlag = true;
-        else if (args[i] === '-h' || args[i] === '--help') {
-            console.log("Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]");
-            process.exit(0);
-        } else if (!args[i].startsWith('-') && !targetPath) {
-            targetPath = args[i];
-        }
-    }
-
-    if (!targetPath) {
-        console.log("Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]");
-        process.exit(1);
-    }
-
-    const projectRoot = path.resolve(targetPath);
-    if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
-        fail(`Directory not found: ${projectRoot}`);
-        process.exit(1);
-    }
-
-    console.log(banner('dependency_analyzer.js', { Project: projectRoot }));
-
-    const pkg = loadJson(path.join(projectRoot, 'package.json'));
-    if (!pkg) {
-        skip("No package.json found — dependency analysis requires a Node.js project");
-        process.exit(0);
+  const args = process.argv.slice(2);
+  let targetPath = null;
+  let auditFlag = false;
+  let checkUnusedFlag = false;
+
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === "--audit") auditFlag = true;
+    else if (args[i] === "--check-unused") checkUnusedFlag = true;
+    else if (args[i] === "-h" || args[i] === "--help") {
+      console.log(
+        "Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]",
+      );
+      process.exit(0);
+    } else if (!args[i].startsWith("-") && !targetPath) {
+      targetPath = args[i];
     }
-
-    let issues = 0;
-    const elapsed = timer();
-    const usedImports = extractImports(projectRoot);
-    const scanMs = elapsed();
-
-    console.log(`\n  ${DIM}Found ${usedImports.size} unique external imports in ${formatMs(scanMs)}${RESET}`);
-
-    if (!checkUnusedFlag) {
-        console.log(sectionHeader('Phantom Imports (not in package.json)'));
-        const phantom = checkPhantom(pkg, usedImports);
-        if (phantom.length > 0) {
-            for (const p of phantom) fail(`'${p}' is imported but not in package.json — possible hallucination`);
-            issues += phantom.length;
-        } else {
-            ok("All imports found in package.json");
-        }
-    }
-
-    console.log(sectionHeader('Unused Dependencies'));
-    const unused = checkUnused(pkg, usedImports);
-    if (unused.length > 0) {
-        for (const u of unused) warn(`'${u}' is in package.json but never imported — may be unused`);
+  }
+
+  if (!targetPath) {
+    console.log(
+      "Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]",
+    );
+    process.exit(1);
+  }
+
+  const projectRoot = path.resolve(targetPath);
+  if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
+    fail(`Directory not found: ${projectRoot}`);
+    process.exit(1);
+  }
+
+  console.log(banner("dependency_analyzer.js", { Project: projectRoot }));
+
+  const pkg = loadJson(path.join(projectRoot, "package.json"));
+  if (!pkg) {
+    skip(
+      "No package.json found — dependency analysis requires a Node.js project",
+    );
+    process.exit(0);
+  }
+
+  let issues = 0;
+  const elapsed = timer();
+  const usedImports = extractImports(projectRoot);
+  const scanMs = elapsed();
+
+  console.log(
+    `\n  ${DIM}Found ${usedImports.size} unique external imports in ${formatMs(scanMs)}${RESET}`,
+  );
+
+  if (!checkUnusedFlag) {
+    console.log(sectionHeader("Phantom Imports (not in package.json)"));
+    const phantom = checkPhantom(pkg, usedImports);
+    if (phantom.length > 0) {
+      for (const p of phantom)
+        fail(
+          `'${p}' is imported but not in package.json — possible hallucination`,
+        );
+      issues += phantom.length;
     } else {
-        ok("No obviously unused dependencies found");
-    }
-
-    if (auditFlag) {
-        console.log(sectionHeader('Vulnerability Audit'));
-        if (!runNpmAudit(projectRoot)) issues += 1;
+      ok("All imports found in package.json");
     }
-
-    console.log(`\n${BOLD}${CYAN}━━━ Dependency Analysis Summary ━━━${RESET}`);
-    if (issues === 0) {
-        ok("All dependency checks passed");
-    } else {
-        fail(`${issues} issue(s) found — review above`);
-    }
-    console.log();
-
-    process.exit(issues > 0 ? 1 : 0);
+  }
+
+  console.log(sectionHeader("Unused Dependencies"));
+  const unused = checkUnused(pkg, usedImports);
+  if (unused.length > 0) {
+    for (const u of unused)
+      warn(`'${u}' is in package.json but never imported — may be unused`);
+  } else {
+    ok("No obviously unused dependencies found");
+  }
+
+  if (auditFlag) {
+    console.log(sectionHeader("Vulnerability Audit"));
+    if (!runNpmAudit(projectRoot)) issues += 1;
+  }
+
+  console.log(`\n${BOLD}${CYAN}━━━ Dependency Analysis Summary ━━━${RESET}`);
+  if (issues === 0) {
+    ok("All dependency checks passed");
+  } else {
+    fail(`${issues} issue(s) found — review above`);
+  }
+  console.log();
+
+  process.exit(issues > 0 ? 1 : 0);
 }
 
 if (require.main === module) {
-    main();
+  main();
 }