tribunal-kit 9.2.4 → 9.2.6

package/.agent/scripts/dependency_analyzer.js

@@ -1,313 +1,335 @@
-#!/usr/bin/env node
-/**
- * dependency_analyzer.js — Dependency health checker for the Tribunal Agent Kit.
- *
- * Analyzes project dependencies for:
- *   - Unused packages (in package.json but never imported)
- *   - Phantom imports (imported but not in package.json)
- *   - npm audit / pip-audit results
- *   - Duplicate/overlapping packages
- *
- * Usage:
- *   node .agent/scripts/dependency_analyzer.js .
- *   node .agent/scripts/dependency_analyzer.js . --audit
- *   node .agent/scripts/dependency_analyzer.js . --check-unused
- */
-
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const {
-  BOLD,
-  DIM,
-  CYAN,
-  RESET,
-  banner,
-  sectionHeader,
-  timer,
-  formatMs,
-  ok,
-  fail,
-  warn,
-  skip,
-} = require('./_colors');
-
-const { walkDir, loadJson, runCommand, DEFAULT_SKIP_DIRS } = require('./_utils');
-
-const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']);
-
-const NODE_BUILTINS = new Set([
-  'fs',
-  'path',
-  'os',
-  'crypto',
-  'http',
-  'https',
-  'url',
-  'util',
-  'stream',
-  'events',
-  'child_process',
-  'cluster',
-  'net',
-  'dns',
-  'tls',
-  'readline',
-  'zlib',
-  'buffer',
-  'querystring',
-  'string_decoder',
-  'assert',
-  'perf_hooks',
-  'worker_threads',
-  'timers',
-  'v8',
-  'node:fs',
-  'node:path',
-  'node:os',
-  'node:crypto',
-  'node:http',
-  'node:https',
-  'node:url',
-  'node:util',
-  'node:stream',
-  'node:events',
-  'node:child_process',
-  'node:net',
-  'node:dns',
-  'node:tls',
-  'node:readline',
-  'node:zlib',
-  'node:buffer',
-  'node:assert',
-  'node:perf_hooks',
-  'node:worker_threads',
-  'node:timers',
-]);
-
-function extractImports(projectRoot) {
-  const imports = new Set();
-  const importPatterns = [
-    /(?:import|export)\s+.*?\s+from\s+["']([^"'.][^"']*)["']/g,
-    /require\s*\(\s*["']([^"'.][^"']*)["']/g,
-    /import\s*\(\s*["']([^"'.][^"']*)["']/g,
-  ];
-
-  // Use shared walkDir from _utils.js (excluding test directories)
-  const files = walkDir(projectRoot, {
-    extensions: SOURCE_EXTENSIONS,
-    skipDirs: new Set([
-      ...DEFAULT_SKIP_DIRS,
-      'test',
-      'tests',
-      '__tests__',
-      'spec',
-      'specs',
-      'fixtures',
-    ]),
-  });
-
-  for (const fullPath of files) {
-    let content;
-    try {
-      content = fs.readFileSync(fullPath, 'utf8');
-    } catch {
-      continue;
-    }
-
-    for (const pattern of importPatterns) {
-      // Reset regex state for each file
-      pattern.lastIndex = 0;
-      let match;
-      while ((match = pattern.exec(content)) !== null) {
-        let pkg = match[1];
-        if (pkg.startsWith('@')) {
-          const parts = pkg.split('/');
-          pkg = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : pkg;
-        } else {
-          pkg = pkg.split('/')[0];
-        }
-        imports.add(pkg);
-      }
-    }
-  }
-
-  return imports;
-}
-
-function checkUnused(pkg, usedImports) {
-  const allDeps = new Set([
-    ...Object.keys(pkg.dependencies || {}),
-    ...Object.keys(pkg.devDependencies || {}),
-  ]);
-
-  const implicitPackages = new Set([
-    'typescript',
-    'eslint',
-    'prettier',
-    'vitest',
-    'jest',
-    'ts-node',
-    '@types/node',
-    '@types/react',
-    'tailwindcss',
-    'postcss',
-    'autoprefixer',
-    'nodemon',
-    'tsx',
-    'vite',
-    'next',
-    'webpack',
-    'babel',
-    '@babel/core',
-  ]);
-
-  const unused = [];
-  for (const d of allDeps) {
-    if (!implicitPackages.has(d) && !d.startsWith('@types/') && !usedImports.has(d)) {
-      unused.push(d);
-    }
-  }
-  return unused.sort();
-}
-
-function checkPhantom(pkg, usedImports) {
-  const allDeps = new Set([
-    ...Object.keys(pkg.dependencies || {}),
-    ...Object.keys(pkg.devDependencies || {}),
-  ]);
-
-  const phantom = [];
-  for (const imp of usedImports) {
-    if (!NODE_BUILTINS.has(imp) && !allDeps.has(imp)) {
-      phantom.push(imp);
-    }
-  }
-  return phantom.sort();
-}
-
-function runNpmAudit(projectRoot) {
-  const result = runCommand('npm', ['audit', '--json'], {
-    cwd: projectRoot,
-    timeout: 60000,
-  });
-
-  if (result.status === null && !result.stdout) {
-    skip('npm not installed — skipping audit');
-    return true;
-  }
-
-  try {
-    const auditData = JSON.parse(result.stdout);
-    const vulns = (auditData.metadata && auditData.metadata.vulnerabilities) || {};
-    const critical = vulns.critical || 0;
-    const high = vulns.high || 0;
-    const moderate = vulns.moderate || 0;
-    const low = vulns.low || 0;
-
-    if (critical + high > 0) {
-      fail(`npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`);
-      return false;
-    } else if (moderate + low > 0) {
-      warn(`npm audit: ${moderate} moderate, ${low} low vulnerabilities`);
-      return true;
-    } else {
-      ok('npm audit — no known vulnerabilities');
-      return true;
-    }
-  } catch {
-    if (result.ok) {
-      ok('npm audit — clean');
-      return true;
-    }
-    fail('npm audit returned errors');
-    return false;
-  }
-}
-
-function main() {
-  const args = process.argv.slice(2);
-  let targetPath = null;
-  let auditFlag = false;
-  let checkUnusedFlag = false;
-
-  for (let i = 0; i < args.length; i++) {
-    if (args[i] === '--audit') auditFlag = true;
-    else if (args[i] === '--check-unused') checkUnusedFlag = true;
-    else if (args[i] === '-h' || args[i] === '--help') {
-      console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
-      process.exit(0);
-    } else if (!args[i].startsWith('-') && !targetPath) {
-      targetPath = args[i];
-    }
-  }
-
-  if (!targetPath) {
-    console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
-    process.exit(1);
-  }
-
-  const projectRoot = path.resolve(targetPath);
-  if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
-    fail(`Directory not found: ${projectRoot}`);
-    process.exit(1);
-  }
-
-  console.log(banner('dependency_analyzer.js', { Project: projectRoot }));
-
-  const pkg = loadJson(path.join(projectRoot, 'package.json'));
-  if (!pkg) {
-    skip('No package.json found — dependency analysis requires a Node.js project');
-    process.exit(0);
-  }
-
-  let issues = 0;
-  const elapsed = timer();
-  const usedImports = extractImports(projectRoot);
-  const scanMs = elapsed();
-
-  console.log(
-    `\n  ${DIM}Found ${usedImports.size} unique external imports in ${formatMs(scanMs)}${RESET}`,
-  );
-
-  console.log(sectionHeader('Phantom Imports (not in package.json)'));
-  const phantom = checkPhantom(pkg, usedImports);
-  if (phantom.length > 0) {
-    for (const p of phantom)
-      fail(`'${p}' is imported but not in package.json — possible hallucination`);
-    issues += phantom.length;
-  } else {
-    ok('All imports found in package.json');
-  }
-
-  if (checkUnusedFlag) {
-    console.log(sectionHeader('Unused Dependencies'));
-    const unused = checkUnused(pkg, usedImports);
-    if (unused.length > 0) {
-      for (const u of unused) warn(`'${u}' is in package.json but never imported — may be unused`);
-    } else {
-      ok('No obviously unused dependencies found');
-    }
-  }
-
-  if (auditFlag) {
-    console.log(sectionHeader('Vulnerability Audit'));
-    if (!runNpmAudit(projectRoot)) issues += 1;
-  }
-
-  console.log(`\n${BOLD}${CYAN}━━━ Dependency Analysis Summary ━━━${RESET}`);
-  if (issues === 0) {
-    ok('All dependency checks passed');
-  } else {
-    fail(`${issues} issue(s) found — review above`);
-  }
-  console.log();
-
-  process.exit(issues > 0 ? 1 : 0);
-}
-
-if (require.main === module) {
-  main();
-}
+#!/usr/bin/env node
+/**
+ * dependency_analyzer.js — Dependency health checker for the Tribunal Agent Kit.
+ *
+ * Analyzes project dependencies for:
+ *   - Unused packages (in package.json but never imported)
+ *   - Phantom imports (imported but not in package.json)
+ *   - npm audit / pip-audit results
+ *   - Duplicate/overlapping packages
+ *
+ * Usage:
+ *   node .agent/scripts/dependency_analyzer.js .
+ *   node .agent/scripts/dependency_analyzer.js . --audit
+ *   node .agent/scripts/dependency_analyzer.js . --check-unused
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const {
+  BOLD,
+  DIM,
+  CYAN,
+  RESET,
+  banner,
+  sectionHeader,
+  timer,
+  formatMs,
+  ok,
+  fail,
+  warn,
+  skip,
+} = require('./_colors');
+
+const { walkDir, loadJson, runCommand, DEFAULT_SKIP_DIRS } = require('./_utils');
+
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs']);
+
+const NODE_BUILTINS = new Set([
+  'fs',
+  'path',
+  'os',
+  'crypto',
+  'http',
+  'https',
+  'url',
+  'util',
+  'stream',
+  'events',
+  'child_process',
+  'cluster',
+  'net',
+  'dns',
+  'tls',
+  'readline',
+  'zlib',
+  'buffer',
+  'querystring',
+  'string_decoder',
+  'assert',
+  'perf_hooks',
+  'worker_threads',
+  'timers',
+  'v8',
+  'module',
+  'vm',
+  'async_hooks',
+  'inspector',
+  'diagnostics_channel',
+  'test',
+  'console',
+  'wasi',
+  'node:fs',
+  'node:path',
+  'node:os',
+  'node:crypto',
+  'node:http',
+  'node:https',
+  'node:url',
+  'node:util',
+  'node:stream',
+  'node:events',
+  'node:child_process',
+  'node:net',
+  'node:dns',
+  'node:tls',
+  'node:readline',
+  'node:zlib',
+  'node:buffer',
+  'node:assert',
+  'node:perf_hooks',
+  'node:worker_threads',
+  'node:timers',
+  'node:module',
+  'node:vm',
+  'node:async_hooks',
+  'node:inspector',
+  'node:diagnostics_channel',
+  'node:test',
+  'node:console',
+  'node:wasi',
+]);
+
+function extractImports(projectRoot) {
+  const imports = new Set();
+  const importPatterns = [
+    /(?:import|export)\s+.*?\s+from\s+["']([^"'.\r\n][^"'\r\n]*)["']/g,
+    /require\s*\(\s*["']([^"'.\r\n][^"'\r\n]*)["']\s*\)/g,
+    /import\s*\(\s*["']([^"'.\r\n][^"'\r\n]*)["']\s*\)/g,
+  ];
+
+  // Use shared walkDir from _utils.js (excluding test directories)
+  const files = walkDir(projectRoot, {
+    extensions: SOURCE_EXTENSIONS,
+    skipDirs: new Set([
+      ...DEFAULT_SKIP_DIRS,
+      'test',
+      'tests',
+      '__tests__',
+      'spec',
+      'specs',
+      'fixtures',
+    ]),
+  });
+
+  for (const fullPath of files) {
+    let content;
+    try {
+      content = fs.readFileSync(fullPath, 'utf8');
+    } catch {
+      continue;
+    }
+
+    // Strip template literals and comments to prevent matching mock diffs and generated templates
+    const sanitized = content
+      .replace(/`[\s\S]*?`/g, '""')
+      .replace(/\/\*[\s\S]*?\*\//g, '')
+      .replace(/\/\/.*$/gm, '');
+
+    for (const pattern of importPatterns) {
+      // Reset regex state for each file
+      pattern.lastIndex = 0;
+      let match;
+      while ((match = pattern.exec(sanitized)) !== null) {
+        let pkg = match[1];
+        if (pkg.startsWith('@')) {
+          const parts = pkg.split('/');
+          pkg = parts.length >= 2 ? `${parts[0]}/${parts[1]}` : pkg;
+        } else {
+          pkg = pkg.split('/')[0];
+        }
+        imports.add(pkg);
+      }
+    }
+  }
+
+  return imports;
+}
+
+function checkUnused(pkg, usedImports) {
+  const allDeps = new Set([
+    ...Object.keys(pkg.dependencies || {}),
+    ...Object.keys(pkg.devDependencies || {}),
+  ]);
+
+  const implicitPackages = new Set([
+    'typescript',
+    'eslint',
+    'prettier',
+    'vitest',
+    'jest',
+    'ts-node',
+    '@types/node',
+    '@types/react',
+    'tailwindcss',
+    'postcss',
+    'autoprefixer',
+    'nodemon',
+    'tsx',
+    'vite',
+    'next',
+    'webpack',
+    'babel',
+    '@babel/core',
+  ]);
+
+  const unused = [];
+  for (const d of allDeps) {
+    if (!implicitPackages.has(d) && !d.startsWith('@types/') && !usedImports.has(d)) {
+      unused.push(d);
+    }
+  }
+  return unused.sort();
+}
+
+function checkPhantom(pkg, usedImports) {
+  const allDeps = new Set([
+    ...Object.keys(pkg.dependencies || {}),
+    ...Object.keys(pkg.devDependencies || {}),
+  ]);
+
+  const phantom = [];
+  for (const imp of usedImports) {
+    if (!NODE_BUILTINS.has(imp) && !allDeps.has(imp)) {
+      phantom.push(imp);
+    }
+  }
+  return phantom.sort();
+}
+
+function runNpmAudit(projectRoot) {
+  const result = runCommand('npm', ['audit', '--json'], {
+    cwd: projectRoot,
+    timeout: 60000,
+  });
+
+  if (result.status === null && !result.stdout) {
+    skip('npm not installed — skipping audit');
+    return true;
+  }
+
+  try {
+    const auditData = JSON.parse(result.stdout);
+    const vulns = (auditData.metadata && auditData.metadata.vulnerabilities) || {};
+    const critical = vulns.critical || 0;
+    const high = vulns.high || 0;
+    const moderate = vulns.moderate || 0;
+    const low = vulns.low || 0;
+
+    if (critical + high > 0) {
+      fail(`npm audit: ${critical} critical, ${high} high, ${moderate} moderate, ${low} low`);
+      return false;
+    } else if (moderate + low > 0) {
+      warn(`npm audit: ${moderate} moderate, ${low} low vulnerabilities`);
+      return true;
+    } else {
+      ok('npm audit — no known vulnerabilities');
+      return true;
+    }
+  } catch {
+    if (result.ok) {
+      ok('npm audit — clean');
+      return true;
+    }
+    fail('npm audit returned errors');
+    return false;
+  }
+}
+
+function main() {
+  const args = process.argv.slice(2);
+  let targetPath = null;
+  let auditFlag = false;
+  let checkUnusedFlag = false;
+
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--audit') auditFlag = true;
+    else if (args[i] === '--check-unused') checkUnusedFlag = true;
+    else if (args[i] === '-h' || args[i] === '--help') {
+      console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
+      process.exit(0);
+    } else if (!args[i].startsWith('-') && !targetPath) {
+      targetPath = args[i];
+    }
+  }
+
+  if (!targetPath) {
+    console.log('Usage: node dependency_analyzer.js <path> [--audit] [--check-unused]');
+    process.exit(1);
+  }
+
+  const projectRoot = path.resolve(targetPath);
+  if (!fs.existsSync(projectRoot) || !fs.statSync(projectRoot).isDirectory()) {
+    fail(`Directory not found: ${projectRoot}`);
+    process.exit(1);
+  }
+
+  console.log(banner('dependency_analyzer.js', { Project: projectRoot }));
+
+  const pkg = loadJson(path.join(projectRoot, 'package.json'));
+  if (!pkg) {
+    skip('No package.json found — dependency analysis requires a Node.js project');
+    process.exit(0);
+  }
+
+  let issues = 0;
+  const elapsed = timer();
+  const usedImports = extractImports(projectRoot);
+  const scanMs = elapsed();
+
+  console.log(
+    `\n  ${DIM}Found ${usedImports.size} unique external imports in ${formatMs(scanMs)}${RESET}`,
+  );
+
+  console.log(sectionHeader('Phantom Imports (not in package.json)'));
+  const phantom = checkPhantom(pkg, usedImports);
+  if (phantom.length > 0) {
+    for (const p of phantom)
+      fail(`'${p}' is imported but not in package.json — possible hallucination`);
+    issues += phantom.length;
+  } else {
+    ok('All imports found in package.json');
+  }
+
+  if (checkUnusedFlag) {
+    console.log(sectionHeader('Unused Dependencies'));
+    const unused = checkUnused(pkg, usedImports);
+    if (unused.length > 0) {
+      for (const u of unused) warn(`'${u}' is in package.json but never imported — may be unused`);
+    } else {
+      ok('No obviously unused dependencies found');
+    }
+  }
+
+  if (auditFlag) {
+    console.log(sectionHeader('Vulnerability Audit'));
+    if (!runNpmAudit(projectRoot)) issues += 1;
+  }
+
+  console.log(`\n${BOLD}${CYAN}━━━ Dependency Analysis Summary ━━━${RESET}`);
+  if (issues === 0) {
+    ok('All dependency checks passed');
+  } else {
+    fail(`${issues} issue(s) found — review above`);
+  }
+  console.log();
+
+  process.exit(issues > 0 ? 1 : 0);
+}
+
+if (require.main === module) {
+  main();
+}