@4da/mcp-server 4.0.0 → 4.1.0

package/dist/live/rate-limiter.d.ts

@@ -0,0 +1,19 @@
+export declare class RateLimiter {
+    private buckets;
+    constructor(config: Record<string, {
+        maxPerMinute: number;
+    }>);
+    canProceed(source: string): boolean;
+    consume(source: string): boolean;
+    waitTimeMs(source: string): number;
+    private refill;
+}
+export declare const DEFAULT_RATE_LIMITS: {
+    osv: {
+        maxPerMinute: number;
+    };
+    hn: {
+        maxPerMinute: number;
+    };
+};
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/live/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AASA,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAkC;gBAErC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAW5D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOnC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAShC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IASlC,OAAO,CAAC,MAAM;CAMf;AAED,eAAO,MAAM,mBAAmB;;;;;;;CAG/B,CAAC"}

package/dist/live/rate-limiter.js

@@ -0,0 +1,52 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+export class RateLimiter {
+    buckets = new Map();
+    constructor(config) {
+        for (const [source, { maxPerMinute }] of Object.entries(config)) {
+            this.buckets.set(source, {
+                tokens: maxPerMinute,
+                maxTokens: maxPerMinute,
+                refillRate: maxPerMinute / 60,
+                lastRefill: Date.now(),
+            });
+        }
+    }
+    canProceed(source) {
+        const bucket = this.buckets.get(source);
+        if (!bucket)
+            return true;
+        this.refill(bucket);
+        return bucket.tokens >= 1;
+    }
+    consume(source) {
+        const bucket = this.buckets.get(source);
+        if (!bucket)
+            return true;
+        this.refill(bucket);
+        if (bucket.tokens < 1)
+            return false;
+        bucket.tokens -= 1;
+        return true;
+    }
+    waitTimeMs(source) {
+        const bucket = this.buckets.get(source);
+        if (!bucket)
+            return 0;
+        this.refill(bucket);
+        if (bucket.tokens >= 1)
+            return 0;
+        const deficit = 1 - bucket.tokens;
+        return Math.ceil((deficit / bucket.refillRate) * 1000);
+    }
+    refill(bucket) {
+        const now = Date.now();
+        const elapsed = (now - bucket.lastRefill) / 1000;
+        bucket.tokens = Math.min(bucket.maxTokens, bucket.tokens + elapsed * bucket.refillRate);
+        bucket.lastRefill = now;
+    }
+}
+export const DEFAULT_RATE_LIMITS = {
+    osv: { maxPerMinute: 10 },
+    hn: { maxPerMinute: 30 },
+};
+//# sourceMappingURL=rate-limiter.js.map

package/dist/live/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/live/rate-limiter.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAS9C,MAAM,OAAO,WAAW;IACd,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEjD,YAAY,MAAgD;QAC1D,KAAK,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;gBACvB,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,YAAY,GAAG,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACxF,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IACzB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;CACzB,CAAC"}

package/dist/live/types.d.ts

@@ -0,0 +1,89 @@
+export type OsvEcosystem = "npm" | "crates.io" | "PyPI" | "Go" | "Maven" | "NuGet" | "RubyGems" | "Packagist";
+export interface ResolvedDependency {
+    name: string;
+    version: string | null;
+    ecosystem: OsvEcosystem;
+    isDev: boolean;
+}
+export interface OsvVulnerability {
+    id: string;
+    summary: string;
+    details: string;
+    aliases: string[];
+    severity: Array<{
+        type: string;
+        score: string;
+    }>;
+    affected: Array<{
+        package: {
+            name: string;
+            ecosystem: string;
+        };
+        ranges: Array<{
+            type: string;
+            events: Array<{
+                introduced?: string;
+                fixed?: string;
+            }>;
+        }>;
+    }>;
+    references: Array<{
+        type: string;
+        url: string;
+    }>;
+    published: string;
+    modified: string;
+}
+export interface VulnerabilityEntry {
+    package: string;
+    currentVersion: string;
+    ecosystem: OsvEcosystem;
+    isDev: boolean;
+    vulnId: string;
+    aliases: string[];
+    severity: "critical" | "high" | "medium" | "low" | "unknown";
+    cvssScore: number | null;
+    summary: string;
+    fixedVersion: string | null;
+    published: string;
+    references: string[];
+}
+export interface VulnerabilityScanResult {
+    scannedAt: string;
+    projectPath: string;
+    ecosystemsScanned: string[];
+    totalScanned: number;
+    totalVulnerable: number;
+    bySeverity: {
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        unknown: number;
+    };
+    vulnerabilities: VulnerabilityEntry[];
+    cleanCount: number;
+    scanDurationMs: number;
+    cached: boolean;
+    offline: boolean;
+}
+export interface LiveHeadline {
+    id: string;
+    title: string;
+    url: string | null;
+    source: "hacker_news";
+    points: number;
+    comments: number;
+    published: string;
+    relevanceScore: number;
+    relevanceReason: string;
+}
+export interface LiveIntelligenceStatus {
+    enabled: boolean;
+    offline: boolean;
+    lastOsvRefresh: string | null;
+    lastHnRefresh: string | null;
+    cachedVulnCount: number;
+    cachedHeadlineCount: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/live/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/live/types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,CAAC;AAE9G,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,EAAE,KAAK,CAAC;QACd,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7C,MAAM,EAAE,KAAK,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,KAAK,CAAC;gBAAE,UAAU,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;SACxD,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;IAC7D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7F,eAAe,EAAE,kBAAkB,EAAE,CAAC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;CAC7B"}

package/dist/live/types.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+export {};
+//# sourceMappingURL=types.js.map

package/dist/live/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/live/types.ts"],"names":[],"mappings":"AAAA,8CAA8C"}

package/dist/live/version-resolver.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Version Resolver
+ *
+ * Extracts exact dependency versions from lock files.
+ * Priority: lock file (exact) > manifest (range/specifier).
+ * Uses only Node.js built-ins — no external parsers.
+ */
+import type { OsvEcosystem, ResolvedDependency } from "./types.js";
+export declare function mapEcosystem(language: string): OsvEcosystem;
+export declare function resolveVersions(cwd: string, deps: string[], devDeps: string[], language: string): ResolvedDependency[];
+//# sourceMappingURL=version-resolver.d.ts.map

package/dist/live/version-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-resolver.d.ts","sourceRoot":"","sources":["../../src/live/version-resolver.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAanE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAE3D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,GACf,kBAAkB,EAAE,CAiCtB"}

package/dist/live/version-resolver.js

@@ -0,0 +1,321 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * Version Resolver
+ *
+ * Extracts exact dependency versions from lock files.
+ * Priority: lock file (exact) > manifest (range/specifier).
+ * Uses only Node.js built-ins — no external parsers.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+const ECOSYSTEM_MAP = {
+    npm: "npm",
+    rust: "crates.io",
+    python: "PyPI",
+    go: "Go",
+    java: "Maven",
+    dotnet: "NuGet",
+    ruby: "RubyGems",
+    php: "Packagist",
+};
+export function mapEcosystem(language) {
+    return ECOSYSTEM_MAP[language] || "npm";
+}
+export function resolveVersions(cwd, deps, devDeps, language) {
+    const ecosystem = mapEcosystem(language);
+    const results = [];
+    const resolvers = {
+        npm: () => resolveNpm(cwd),
+        "crates.io": () => resolveRust(cwd),
+        PyPI: () => resolvePython(cwd),
+        Go: () => resolveGo(cwd),
+    };
+    const resolver = resolvers[ecosystem];
+    const versionMap = resolver ? resolver() : new Map();
+    for (const name of deps) {
+        results.push({
+            name,
+            version: versionMap.get(name) || null,
+            ecosystem,
+            isDev: false,
+        });
+    }
+    for (const name of devDeps) {
+        results.push({
+            name,
+            version: versionMap.get(name) || null,
+            ecosystem,
+            isDev: true,
+        });
+    }
+    return results;
+}
+// =============================================================================
+// npm: package-lock.json > pnpm-lock.yaml > yarn.lock > package.json ranges
+// =============================================================================
+function resolveNpm(cwd) {
+    const versions = new Map();
+    // Try package-lock.json first (npm)
+    const lockPath = path.join(cwd, "package-lock.json");
+    if (fs.existsSync(lockPath)) {
+        try {
+            const lock = JSON.parse(fs.readFileSync(lockPath, "utf-8"));
+            // v2/v3 format: packages["node_modules/name"].version
+            if (lock.packages) {
+                for (const [key, value] of Object.entries(lock.packages)) {
+                    const name = key.replace(/^node_modules\//, "");
+                    if (name && value.version) {
+                        versions.set(name, value.version);
+                    }
+                }
+            }
+            // v1 format fallback: dependencies.name.version
+            if (versions.size === 0 && lock.dependencies) {
+                for (const [name, value] of Object.entries(lock.dependencies)) {
+                    if (value.version) {
+                        versions.set(name, value.version);
+                    }
+                }
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // Try pnpm-lock.yaml (line-by-line, no YAML parser)
+    const pnpmLockPath = path.join(cwd, "pnpm-lock.yaml");
+    if (fs.existsSync(pnpmLockPath)) {
+        try {
+            const content = fs.readFileSync(pnpmLockPath, "utf-8");
+            // pnpm v9 importers format: dependency name on one line, version on the next
+            // Example:
+            //   '@modelcontextprotocol/sdk':
+            //     specifier: ^1.10.0
+            //     version: 1.26.0(zod@4.3.6)
+            const lines = content.split("\n");
+            let currentPkg = null;
+            for (const line of lines) {
+                // Match dependency name (with or without quotes, scoped packages)
+                const pkgMatch = line.match(/^\s{4,8}'?(@?[^':]+)'?:\s*$/);
+                if (pkgMatch) {
+                    currentPkg = pkgMatch[1].trim();
+                    continue;
+                }
+                // Match version line under a dependency
+                if (currentPkg) {
+                    const versionMatch = line.match(/^\s+version:\s+['"]?(\d+\.\d+[^('"\s]*)['"]?/);
+                    if (versionMatch) {
+                        versions.set(currentPkg, versionMatch[1]);
+                        currentPkg = null;
+                        continue;
+                    }
+                    // specifier line — skip, wait for version
+                    if (line.match(/^\s+specifier:/))
+                        continue;
+                    // Any other line resets current package context
+                    if (!line.match(/^\s/))
+                        currentPkg = null;
+                }
+            }
+            // Also try packages section for pnpm v6-v8 format: '/name@version:'
+            const pkgRegex = /^\s*['/]?([^@\s][^@]*)@(\d+[^:('"]*)/gm;
+            let match;
+            while ((match = pkgRegex.exec(content)) !== null) {
+                const name = match[1].replace(/^\//, "").trim();
+                const version = match[2].trim().replace(/['":]/g, "");
+                if (name && version && /^\d/.test(version) && !versions.has(name)) {
+                    versions.set(name, version);
+                }
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // Try yarn.lock
+    const yarnLockPath = path.join(cwd, "yarn.lock");
+    if (fs.existsSync(yarnLockPath)) {
+        try {
+            const content = fs.readFileSync(yarnLockPath, "utf-8");
+            // Format: "name@range":\n  version "x.y.z"
+            const blocks = content.split(/\n(?=\S)/);
+            for (const block of blocks) {
+                const headerMatch = block.match(/^"?([^@\s"]+)@/);
+                const versionMatch = block.match(/^\s+version\s+"([^"]+)"/m);
+                if (headerMatch && versionMatch) {
+                    versions.set(headerMatch[1], versionMatch[1]);
+                }
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // Fallback: extract version ranges from package.json
+    const pkgPath = path.join(cwd, "package.json");
+    if (fs.existsSync(pkgPath)) {
+        try {
+            const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf-8"));
+            const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+            for (const [name, spec] of Object.entries(allDeps)) {
+                const version = extractVersionFromSpec(spec);
+                if (version)
+                    versions.set(name, version);
+            }
+        }
+        catch { /* skip */ }
+    }
+    return versions;
+}
+// =============================================================================
+// Rust: Cargo.lock
+// =============================================================================
+function resolveRust(cwd) {
+    const versions = new Map();
+    const lockPath = path.join(cwd, "Cargo.lock");
+    if (!fs.existsSync(lockPath)) {
+        // Fallback: parse Cargo.toml version strings
+        return resolveRustFromManifest(cwd);
+    }
+    try {
+        const content = fs.readFileSync(lockPath, "utf-8");
+        // [[package]]\nname = "serde"\nversion = "1.0.193"
+        const packageRegex = /\[\[package\]\]\s*\nname\s*=\s*"([^"]+)"\s*\nversion\s*=\s*"([^"]+)"/g;
+        let match;
+        while ((match = packageRegex.exec(content)) !== null) {
+            versions.set(match[1], match[2]);
+        }
+    }
+    catch { /* skip */ }
+    return versions;
+}
+function resolveRustFromManifest(cwd) {
+    const versions = new Map();
+    const cargoPath = path.join(cwd, "Cargo.toml");
+    if (!fs.existsSync(cargoPath))
+        return versions;
+    try {
+        const content = fs.readFileSync(cargoPath, "utf-8");
+        // name = "1.0" or name = { version = "1.0", ... }
+        const depRegex = /^([a-zA-Z_][\w-]*)\s*=\s*(?:"([^"]+)"|.*?version\s*=\s*"([^"]+)")/gm;
+        let match;
+        while ((match = depRegex.exec(content)) !== null) {
+            const name = match[1];
+            const version = match[2] || match[3];
+            if (version && /^\d/.test(version)) {
+                versions.set(name, version);
+            }
+        }
+    }
+    catch { /* skip */ }
+    return versions;
+}
+// =============================================================================
+// Python: poetry.lock > Pipfile.lock > requirements.txt
+// =============================================================================
+function resolvePython(cwd) {
+    const versions = new Map();
+    // poetry.lock
+    const poetryLock = path.join(cwd, "poetry.lock");
+    if (fs.existsSync(poetryLock)) {
+        try {
+            const content = fs.readFileSync(poetryLock, "utf-8");
+            const packageRegex = /\[\[package\]\]\s*\nname\s*=\s*"([^"]+)"\s*\nversion\s*=\s*"([^"]+)"/g;
+            let match;
+            while ((match = packageRegex.exec(content)) !== null) {
+                versions.set(match[1].toLowerCase(), match[2]);
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // Pipfile.lock
+    const pipfileLock = path.join(cwd, "Pipfile.lock");
+    if (fs.existsSync(pipfileLock)) {
+        try {
+            const lock = JSON.parse(fs.readFileSync(pipfileLock, "utf-8"));
+            const sections = [lock.default, lock.develop].filter(Boolean);
+            for (const section of sections) {
+                for (const [name, info] of Object.entries(section)) {
+                    const version = info.version;
+                    if (version) {
+                        versions.set(name.toLowerCase(), version.replace(/^==/, ""));
+                    }
+                }
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // requirements.txt pinned versions
+    const reqPath = path.join(cwd, "requirements.txt");
+    if (fs.existsSync(reqPath)) {
+        try {
+            const content = fs.readFileSync(reqPath, "utf-8");
+            for (const line of content.split("\n")) {
+                const match = line.trim().match(/^([a-zA-Z0-9_-]+)\s*==\s*(.+)/);
+                if (match) {
+                    versions.set(match[1].toLowerCase(), match[2].trim());
+                }
+            }
+        }
+        catch { /* skip */ }
+    }
+    return versions;
+}
+// =============================================================================
+// Go: go.sum > go.mod
+// =============================================================================
+function resolveGo(cwd) {
+    const versions = new Map();
+    // go.sum has exact versions
+    const goSumPath = path.join(cwd, "go.sum");
+    if (fs.existsSync(goSumPath)) {
+        try {
+            const content = fs.readFileSync(goSumPath, "utf-8");
+            for (const line of content.split("\n")) {
+                const match = line.match(/^(\S+)\s+(v[\d.]+)/);
+                if (match) {
+                    versions.set(match[1], match[2]);
+                }
+            }
+            if (versions.size > 0)
+                return versions;
+        }
+        catch { /* fall through */ }
+    }
+    // Fallback: go.mod require block
+    const goModPath = path.join(cwd, "go.mod");
+    if (fs.existsSync(goModPath)) {
+        try {
+            const content = fs.readFileSync(goModPath, "utf-8");
+            const requireMatch = content.match(/require\s*\(([\s\S]*?)\)/);
+            if (requireMatch) {
+                for (const line of requireMatch[1].split("\n")) {
+                    const match = line.trim().match(/^(\S+)\s+(v[\d.]+)/);
+                    if (match) {
+                        versions.set(match[1], match[2]);
+                    }
+                }
+            }
+        }
+        catch { /* skip */ }
+    }
+    return versions;
+}
+// =============================================================================
+// Helpers
+// =============================================================================
+/**
+ * Extract a usable version from an npm version specifier.
+ * "^4.18.2" -> "4.18.2", "~1.0.0" -> "1.0.0", ">=2.0.0" -> "2.0.0"
+ */
+function extractVersionFromSpec(spec) {
+    if (!spec)
+        return null;
+    const match = spec.match(/(\d+\.\d+\.\d+(?:-[\w.]+)?)/);
+    return match ? match[1] : null;
+}
+//# sourceMappingURL=version-resolver.js.map

package/dist/live/version-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-resolver.js","sourceRoot":"","sources":["../../src/live/version-resolver.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,aAAa,GAAiC;IAClD,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,MAAM;IACd,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,OAAO;IACb,MAAM,EAAE,OAAO;IACf,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAc,EACd,OAAiB,EACjB,QAAgB;IAEhB,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,MAAM,SAAS,GAA8C;QAC3D,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;QACnC,IAAI,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC;QAC9B,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC;KACzB,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAkB,CAAC;IAErE,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;YACrC,SAAS;YACT,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;YACrC,SAAS;YACT,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAEhF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,oCAAoC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5D,sDAAsD;YACtD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBAChD,IAAI,IAAI,IAAK,KAA8B,CAAC,OAAO,EAAE,CAAC;wBACpD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAG,KAA6B,CAAC,OAAO,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;YACD,gDAAgD;YAChD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9D,IAAK,KAA8B,CAAC,OAAO,EAAE,CAAC;wBAC5C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAG,KAA6B,CAAC,OAAO,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,oDAAoD;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACtD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAEvD,6EAA6E;YAC7E,WAAW;YACX,iCAAiC;YACjC,yBAAyB;YACzB,iCAAiC;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,UAAU,GAAkB,IAAI,CAAC;YAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,kEAAkE;gBAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC3D,IAAI,QAAQ,EAAE,CAAC;oBACb,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBAChC,SAAS;gBACX,CAAC;gBACD,wCAAwC;gBACxC,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;oBAChF,IAAI,YAAY,EAAE,CAAC;wBACjB,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC1C,UAAU,GAAG,IAAI,CAAC;wBAClB,SAAS;oBACX,CAAC;oBACD,0CAA0C;oBAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;wBAAE,SAAS;oBAC3C,gDAAgD;oBAChD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;wBAAE,UAAU,GAAG,IAAI,CAAC;gBAC5C,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,MAAM,QAAQ,GAAG,wCAAwC,CAAC;YAC1D,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAChD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,gBAAgB;IAChB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACvD,2CAA2C;YAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAClD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC7D,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;oBAChC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;YAChE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAc,CAAC,CAAC;gBACvD,IAAI,OAAO;oBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,6CAA6C;QAC7C,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,mDAAmD;QACnD,MAAM,YAAY,GAAG,uEAAuE,CAAC;QAC7F,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAEtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpD,kDAAkD;QAClD,MAAM,QAAQ,GAAG,qEAAqE,CAAC;QACvF,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAEtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAEhF,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,cAAc;IACd,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,YAAY,GAAG,uEAAuE,CAAC;YAC7F,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACrD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,eAAe;IACf,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnD,MAAM,OAAO,GAAI,IAA6B,CAAC,OAAO,CAAC;oBACvD,IAAI,OAAO,EAAE,CAAC;wBACZ,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACjE,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3C,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IAED,iCAAiC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACtD,IAAI,KAAK,EAAE,CAAC;wBACV,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/live-singleton.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Live Intelligence Singleton
+ *
+ * Separated from index.ts to avoid circular dependency with tool-dispatch.ts.
+ */
+import type { LiveIntelligence } from "./live/index.js";
+export declare function setLiveIntelligence(li: LiveIntelligence): void;
+export declare function getLiveIntelligence(): LiveIntelligence | null;
+//# sourceMappingURL=live-singleton.d.ts.map

package/dist/live-singleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-singleton.d.ts","sourceRoot":"","sources":["../src/live-singleton.ts"],"names":[],"mappings":"AACA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAIxD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,CAE9D;AAED,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAE7D"}

package/dist/live-singleton.js

@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * Live Intelligence Singleton
+ *
+ * Separated from index.ts to avoid circular dependency with tool-dispatch.ts.
+ */
+let instance = null;
+export function setLiveIntelligence(li) {
+    instance = li;
+}
+export function getLiveIntelligence() {
+    return instance;
+}
+//# sourceMappingURL=live-singleton.js.map

package/dist/live-singleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-singleton.js","sourceRoot":"","sources":["../src/live-singleton.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;GAIG;AAIH,IAAI,QAAQ,GAA4B,IAAI,CAAC;AAE7C,MAAM,UAAU,mBAAmB,CAAC,EAAoB;IACtD,QAAQ,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/llm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../src/llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;CASjC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAM1D,CAAC;AAwDF;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,GAAG,CAAC,EAAE;IAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAA;KAAE,CAAA;CAAE,GAC3E,SAAS,CAmDX;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAaxD;AA0BD;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,gBAAgB,EACzB,SAAS,GAAE,MAAc,GACxB,OAAO,CAAC,eAAe,CAAC,CAc1B;AAkJD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;;OAGG;;oBAEuB,cAAc;;4BAWlB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAaxD;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAUxD;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAUxD;;;OAGG;;oBAEuB,cAAc;;4BAWlB,OAAO,KAAG,MAAM;;IAOtC;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;CASzD,CAAC;AAMF;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,MAAiC,GACzC,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBnE;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAgB9B,CAAC"}
+{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../src/llm.ts"],"names":[],"mappings":"AACA;;;;;;;;;;GAUG;AAMH,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;CASjC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAM1D,CAAC;AAwDF;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,GAAG,CAAC,EAAE;IAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAA;KAAE,CAAA;CAAE,GAC3E,SAAS,CAmDX;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAaxD;AA0BD;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,eAAe,CAAC,CA0B1B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,gBAAgB,EACzB,SAAS,GAAE,MAAc,GACxB,OAAO,CAAC,eAAe,CAAC,CAc1B;AAkJD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;;OAGG;;oBAEuB,cAAc;;4BAWlB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAaxD;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAUxD;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;IAUxD;;;OAGG;;oBAEuB,cAAc;;4BAWlB,OAAO,KAAG,MAAM;;IAOtC;;;OAGG;;oBAEsB,cAAc;;4BAYjB,OAAO,WAAW,OAAO,KAAG,MAAM;;CASzD,CAAC;AAMF;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,MAAiC,GACzC,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBnE;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAgB9B,CAAC"}

package/dist/llm.js

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
 /**
  * LLM Client for 4DA MCP Server
  *
@@ -151,7 +152,7 @@ export function canSynthesize(config) {
 function getModelForComplexity(config, complexity) {
     if (config.provider !== "ollama") {
         // Cloud providers use the configured model
-        return config.model || (config.provider === "anthropic" ? "claude-3-5-sonnet-20241022" : "gpt-4o");
+        return config.model || (config.provider === "anthropic" ? "claude-sonnet-4-6" : "gpt-4o");
     }
     // Ollama: use tiered models
     switch (complexity) {
@@ -226,7 +227,7 @@ export async function synthesizeWithTimeout(config, request, timeoutMs = 30000)
  * Anthropic Claude synthesis
  */
 async function synthesizeAnthropic(config, request, signal) {
-    const model = config.model || "claude-3-5-sonnet-20241022";
+    const model = config.model || "claude-sonnet-4-6";
     const maxTokens = request.max_tokens || 1024;
     const response = await fetch("https://api.anthropic.com/v1/messages", {
         method: "POST",