[Eddie-dk1]

Summary

• Select the output profile from the reachable graph, so pure TypeScript in React/Bundler projects does not gain React or Vite; add a Vite-only asset profile.
• Trace CSS with syntax-aware parsing, support aliases without baseUrl and resource query suffixes, and report ambient declarations, global styling, CommonJS, and framework-specific loaders explicitly.
• Validate imported dependency ranges against source manifests and npm/pnpm lockfiles; version Analysis schema 3 and Plan schema 2.
• Add focused fixtures and packed-package export/build/import smoke cases, and prepare 0.4.0-beta.1 without publishing it.

Checks

• pnpm install --frozen-lockfile
• pnpm lint, typecheck, test, build, test:e2e
• pnpm audit --prod
• packed tarball smoke: seven exported package cases

The local ROADMAP.md and real-world validation log are intentionally excluded. npm publication requires separate confirmation.