tribunal-kit 6.0.1 → 8.0.0

package/.agent/scripts/dependency_analyzer.js

@@ -14,10 +14,10 @@
  *   node .agent/scripts/dependency_analyzer.js . --check-unused
  */
 
-"use strict";
+'use strict';
 
-const fs = require("fs");
-const path = require("path");
+const fs = require('fs');
+const path = require('path');
 
 const {
   BOLD,
@@ -32,66 +32,59 @@ const {
   fail,
   warn,
   skip,
-} = require("./_colors");
+} = require('./_colors');
 
-const { walkDir, loadJson, runCommand } = require("./_utils");
+const { walkDir, loadJson, runCommand, DEFAULT_SKIP_DIRS } = require('./_utils');
 
-const SOURCE_EXTENSIONS = new Set([
-  ".ts",
-  ".tsx",
-  ".js",
-  ".jsx",
-  ".mjs",
-  ".cjs",
-]);
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']);
 
 const NODE_BUILTINS = new Set([
-  "fs",
-  "path",
-  "os",
-  "crypto",
-  "http",
-  "https",
-  "url",
-  "util",
-  "stream",
-  "events",
-  "child_process",
-  "cluster",
-  "net",
-  "dns",
-  "tls",
-  "readline",
-  "zlib",
-  "buffer",
-  "querystring",
-  "string_decoder",
-  "assert",
-  "perf_hooks",
-  "worker_threads",
-  "timers",
-  "v8",
-  "node:fs",
-  "node:path",
-  "node:os",
-  "node:crypto",
-  "node:http",
-  "node:https",
-  "node:url",
-  "node:util",
-  "node:stream",
-  "node:events",
-  "node:child_process",
-  "node:net",
-  "node:dns",
-  "node:tls",
-  "node:readline",
-  "node:zlib",
-  "node:buffer",
-  "node:assert",
-  "node:perf_hooks",
-  "node:worker_threads",
-  "node:timers",
+  'fs',
+  'path',
+  'os',
+  'crypto',
+  'http',
+  'https',
+  'url',
+  'util',
+  'stream',
+  'events',
+  'child_process',
+  'cluster',
+  'net',
+  'dns',
+  'tls',
+  'readline',
+  'zlib',
+  'buffer',
+  'querystring',
+  'string_decoder',
+  'assert',
+  'perf_hooks',
+  'worker_threads',
+  'timers',
+  'v8',
+  'node:fs',
+  'node:path',
+  'node:os',
+  'node:crypto',
+  'node:http',
+  'node:https',
+  'node:url',
+  'node:util',
+  'node:stream',
+  'node:events',
+  'node:child_process',
+  'node:net',
+  'node:dns',
+  'node:tls',
+  'node:readline',
+  'node:zlib',
+  'node:buffer',
+  'node:assert',
+  'node:perf_hooks',
+  'node:worker_threads',
+  'node:timers',
 ]);
 
 function extractImports(projectRoot) {
@@ -102,13 +95,24 @@ function extractImports(projectRoot) {
     /import\s*\(\s*["']([^"'.][^"']*)["']/g,
   ];
 
-  // Use shared walkDir from _utils.js
-  const files = walkDir(projectRoot, { extensions: SOURCE_EXTENSIONS });
+  // Use shared walkDir from _utils.js (excluding test directories)
+  const files = walkDir(projectRoot, {
+    extensions: SOURCE_EXTENSIONS,
+    skipDirs: new Set([
+      ...DEFAULT_SKIP_DIRS,
+      'test',
+      'tests',
+      '__tests__',
+      'spec',
+      'specs',
+      'fixtures',
+    ]),
+  });
 
   for (const fullPath of files) {
     let content;
     try {
-      content = fs.readFileSync(fullPath, "utf8");
+      content = fs.readFileSync(fullPath, 'utf8');
     } catch {
       continue;
     }
@@ -119,11 +123,11 @@ function extractImports(projectRoot) {
       let match;
       while ((match = pattern.exec(content)) !== null) {
         let pkg = match[1];
-        if (pkg.startsWith("@")) {
-          const parts = pkg.split("/");
+        if (pkg.startsWith('@')) {
+          const parts = pkg.split('/');
           pkg = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : pkg;
         } else {
-          pkg = pkg.split("/")[0];
+          pkg = pkg.split('/')[0];
         }
         imports.add(pkg);
       }
@@ -140,33 +144,29 @@ function checkUnused(pkg, usedImports) {
   ]);
 
   const implicitPackages = new Set([
-    "typescript",
-    "eslint",
-    "prettier",
-    "vitest",
-    "jest",
-    "ts-node",
-    "@types/node",
-    "@types/react",
-    "tailwindcss",
-    "postcss",
-    "autoprefixer",
-    "nodemon",
-    "tsx",
-    "vite",
-    "next",
-    "webpack",
-    "babel",
-    "@babel/core",
+    'typescript',
+    'eslint',
+    'prettier',
+    'vitest',
+    'jest',
+    'ts-node',
+    '@types/node',
+    '@types/react',
+    'tailwindcss',
+    'postcss',
+    'autoprefixer',
+    'nodemon',
+    'tsx',
+    'vite',
+    'next',
+    'webpack',
+    'babel',
+    '@babel/core',
   ]);
 
   const unused = [];
   for (const d of allDeps) {
-    if (
-      !implicitPackages.has(d) &&
-      !d.startsWith("@types/") &&
-      !usedImports.has(d)
-    ) {
+    if (!implicitPackages.has(d) && !d.startsWith('@types/') && !usedImports.has(d)) {
       unused.push(d);
     }
   }
@@ -189,43 +189,40 @@ function checkPhantom(pkg, usedImports) {
 }
 
 function runNpmAudit(projectRoot) {
-  const result = runCommand("npm", ["audit", "--json"], {
+  const result = runCommand('npm', ['audit', '--json'], {
     cwd: projectRoot,
     timeout: 60000,
   });
 
   if (result.status === null && !result.stdout) {
-    skip("npm not installed — skipping audit");
+    skip('npm not installed — skipping audit');
     return true;
   }
 
   try {
     const auditData = JSON.parse(result.stdout);
-    const vulns =
-      (auditData.metadata && auditData.metadata.vulnerabilities) || {};
+    const vulns = (auditData.metadata && auditData.metadata.vulnerabilities) || {};
     const critical = vulns.critical || 0;
     const high = vulns.high || 0;
     const moderate = vulns.moderate || 0;
     const low = vulns.low || 0;
 
     if (critical + high > 0) {
-      fail(
-        `npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`,
-      );
+      fail(`npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`);
       return false;
     } else if (moderate + low > 0) {
       warn(`npm audit: ${moderate} moderate, ${low} low vulnerabilities`);
       return true;
     } else {
-      ok("npm audit — no known vulnerabilities");
+      ok('npm audit — no known vulnerabilities');
       return true;
     }
   } catch {
     if (result.ok) {
-      ok("npm audit — clean");
+      ok('npm audit — clean');
       return true;
     }
-    fail("npm audit returned errors");
+    fail('npm audit returned errors');
     return false;
   }
 }
@@ -237,22 +234,18 @@ function main() {
   let checkUnusedFlag = false;
 
   for (let i = 0; i < args.length; i++) {
-    if (args[i] === "--audit") auditFlag = true;
-    else if (args[i] === "--check-unused") checkUnusedFlag = true;
-    else if (args[i] === "-h" || args[i] === "--help") {
-      console.log(
-        "Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]",
-      );
+    if (args[i] === '--audit') auditFlag = true;
+    else if (args[i] === '--check-unused') checkUnusedFlag = true;
+    else if (args[i] === '-h' || args[i] === '--help') {
+      console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
       process.exit(0);
-    } else if (!args[i].startsWith("-") && !targetPath) {
+    } else if (!args[i].startsWith('-') && !targetPath) {
       targetPath = args[i];
     }
   }
 
   if (!targetPath) {
-    console.log(
-      "Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]",
-    );
+    console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
     process.exit(1);
   }
 
@@ -262,13 +255,11 @@ function main() {
     process.exit(1);
   }
 
-  console.log(banner("dependency_analyzer.js", { Project: projectRoot }));
+  console.log(banner('dependency_analyzer.js', { Project: projectRoot }));
 
-  const pkg = loadJson(path.join(projectRoot, "package.json"));
+  const pkg = loadJson(path.join(projectRoot, 'package.json'));
   if (!pkg) {
-    skip(
-      "No package.json found — dependency analysis requires a Node.js project",
-    );
+    skip('No package.json found — dependency analysis requires a Node.js project');
     process.exit(0);
   }
 
@@ -282,36 +273,33 @@ function main() {
   );
 
   if (!checkUnusedFlag) {
-    console.log(sectionHeader("Phantom Imports (not in package.json)"));
+    console.log(sectionHeader('Phantom Imports (not in package.json)'));
     const phantom = checkPhantom(pkg, usedImports);
     if (phantom.length > 0) {
       for (const p of phantom)
-        fail(
-          `'${p}' is imported but not in package.json — possible hallucination`,
-        );
+        fail(`'${p}' is imported but not in package.json — possible hallucination`);
       issues += phantom.length;
     } else {
-      ok("All imports found in package.json");
+      ok('All imports found in package.json');
     }
   }
 
-  console.log(sectionHeader("Unused Dependencies"));
+  console.log(sectionHeader('Unused Dependencies'));
   const unused = checkUnused(pkg, usedImports);
   if (unused.length > 0) {
-    for (const u of unused)
-      warn(`'${u}' is in package.json but never imported — may be unused`);
+    for (const u of unused) warn(`'${u}' is in package.json but never imported — may be unused`);
   } else {
-    ok("No obviously unused dependencies found");
+    ok('No obviously unused dependencies found');
   }
 
   if (auditFlag) {
-    console.log(sectionHeader("Vulnerability Audit"));
+    console.log(sectionHeader('Vulnerability Audit'));
     if (!runNpmAudit(projectRoot)) issues += 1;
   }
 
   console.log(`\n${BOLD}${CYAN}━━━ Dependency Analysis Summary ━━━${RESET}`);
   if (issues === 0) {
-    ok("All dependency checks passed");
+    ok('All dependency checks passed');
   } else {
     fail(`${issues} issue(s) found — review above`);
   }