@4da/mcp-server 4.0.0 → 4.1.1

package/dist/live/cache.js

@@ -0,0 +1,61 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+export class LiveCache {
+    db;
+    constructor(db) {
+        this.db = db;
+        this.ensureTable();
+        this.purgeExpired();
+    }
+    ensureTable() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS live_cache (
+        cache_key TEXT PRIMARY KEY,
+        data TEXT NOT NULL,
+        source TEXT NOT NULL,
+        fetched_at TEXT NOT NULL DEFAULT (datetime('now')),
+        expires_at TEXT NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS idx_live_cache_expires ON live_cache(expires_at);
+      CREATE INDEX IF NOT EXISTS idx_live_cache_source ON live_cache(source);
+    `);
+    }
+    get(key) {
+        const row = this.db.prepare("SELECT data FROM live_cache WHERE cache_key = ? AND expires_at > datetime('now')").get(key);
+        if (!row)
+            return null;
+        try {
+            return JSON.parse(row.data);
+        }
+        catch {
+            return null;
+        }
+    }
+    getStale(key) {
+        const row = this.db.prepare("SELECT data, fetched_at FROM live_cache WHERE cache_key = ?").get(key);
+        if (!row)
+            return null;
+        try {
+            return { data: JSON.parse(row.data), fetchedAt: row.fetched_at };
+        }
+        catch {
+            return null;
+        }
+    }
+    set(key, data, source, ttlSeconds) {
+        this.db.prepare(`
+      INSERT OR REPLACE INTO live_cache (cache_key, data, source, fetched_at, expires_at)
+      VALUES (?, ?, ?, datetime('now'), datetime('now', '+' || ? || ' seconds'))
+    `).run(key, JSON.stringify(data), source, ttlSeconds);
+    }
+    purgeExpired() {
+        const result = this.db.prepare("DELETE FROM live_cache WHERE expires_at <= datetime('now')").run();
+        return result.changes;
+    }
+    invalidateSource(source) {
+        this.db.prepare("DELETE FROM live_cache WHERE source = ?").run(source);
+    }
+    invalidateAll() {
+        this.db.prepare("DELETE FROM live_cache").run();
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/live/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/live/cache.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAY9C,MAAM,OAAO,SAAS;IACZ,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;KAUZ,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAI,GAAW;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,kFAAkF,CACnF,CAAC,GAAG,CAAC,GAAG,CAAiC,CAAC;QAE3C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAM,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,QAAQ,CAAI,GAAW;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,6DAA6D,CAC9D,CAAC,GAAG,CAAC,GAAG,CAAqD,CAAC;QAE/D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAM,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,IAAa,EAAE,MAAc,EAAE,UAAkB;QAChE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,4DAA4D,CAC7D,CAAC,GAAG,EAAE,CAAC;QACR,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,gBAAgB,CAAC,MAAc;QAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,aAAa;QACX,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;CACF"}

package/dist/live/hn-fetcher.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Hacker News Headline Fetcher
+ *
+ * Queries HN Algolia API for headlines relevant to the user's tech stack.
+ * Free, no auth. Generates search queries from detected technologies.
+ *
+ * Privacy: sends generic tech keywords (e.g. "react", "rust") — not personal data.
+ */
+import type { LiveCache } from "./cache.js";
+import type { RateLimiter } from "./rate-limiter.js";
+import type { LiveHeadline } from "./types.js";
+export declare class HNFetcher {
+    private cache;
+    private rateLimiter;
+    constructor(cache: LiveCache, rateLimiter: RateLimiter);
+    fetch(techStack: string[]): Promise<LiveHeadline[]>;
+    private searchHN;
+}
+//# sourceMappingURL=hn-fetcher.d.ts.map

package/dist/live/hn-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hn-fetcher.d.ts","sourceRoot":"","sources":["../../src/live/hn-fetcher.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAuB/C,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;YAmC3C,QAAQ;CAqBvB"}

package/dist/live/hn-fetcher.js

@@ -0,0 +1,123 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * Hacker News Headline Fetcher
+ *
+ * Queries HN Algolia API for headlines relevant to the user's tech stack.
+ * Free, no auth. Generates search queries from detected technologies.
+ *
+ * Privacy: sends generic tech keywords (e.g. "react", "rust") — not personal data.
+ */
+const HN_ALGOLIA_URL = "https://hn.algolia.com/api/v1/search";
+const HN_TIMEOUT_MS = 8_000;
+const HN_CACHE_TTL = 1800; // 30 minutes
+const MAX_QUERIES = 5;
+const RESULTS_PER_QUERY = 10;
+const MIN_POINTS = 10;
+export class HNFetcher {
+    cache;
+    rateLimiter;
+    constructor(cache, rateLimiter) {
+        this.cache = cache;
+        this.rateLimiter = rateLimiter;
+    }
+    async fetch(techStack) {
+        const cacheKey = `hn:${techStack.slice(0, MAX_QUERIES).sort().join(",")}`;
+        const cached = this.cache.get(cacheKey);
+        if (cached !== null)
+            return cached;
+        if (!this.rateLimiter.canProceed("hn")) {
+            const stale = this.cache.getStale(cacheKey);
+            return stale?.data || [];
+        }
+        const queries = buildQueries(techStack);
+        const allHits = [];
+        const seen = new Set();
+        for (const query of queries) {
+            if (!this.rateLimiter.consume("hn"))
+                break;
+            try {
+                const hits = await this.searchHN(query);
+                for (const hit of hits) {
+                    if (!seen.has(hit.objectID)) {
+                        seen.add(hit.objectID);
+                        allHits.push(hit);
+                    }
+                }
+            }
+            catch {
+                // Individual query failure — continue with others
+            }
+        }
+        const headlines = scoreAndMap(allHits, techStack);
+        this.cache.set(cacheKey, headlines, "hn", HN_CACHE_TTL);
+        return headlines;
+    }
+    async searchHN(query) {
+        const params = new URLSearchParams({
+            query,
+            tags: "story",
+            numericFilters: `points>${MIN_POINTS}`,
+            hitsPerPage: String(RESULTS_PER_QUERY),
+        });
+        const url = `${HN_ALGOLIA_URL}?${params}`;
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), HN_TIMEOUT_MS);
+        try {
+            const response = await fetch(url, { signal: controller.signal });
+            if (!response.ok)
+                return [];
+            const data = (await response.json());
+            return data.hits || [];
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+function buildQueries(techStack) {
+    // Take top technologies, prioritize frameworks over languages
+    const prioritized = [...techStack]
+        .filter((t) => t.length >= 2 && !SKIP_TERMS.has(t))
+        .slice(0, MAX_QUERIES);
+    return prioritized;
+}
+function wordBoundaryMatch(text, term) {
+    const idx = text.indexOf(term);
+    if (idx === -1)
+        return false;
+    const before = idx === 0 || !/[a-zA-Z0-9]/.test(text[idx - 1]);
+    const after = idx + term.length >= text.length || !/[a-zA-Z0-9]/.test(text[idx + term.length]);
+    return before && after;
+}
+function scoreAndMap(hits, techStack) {
+    const techLower = techStack.map((t) => t.toLowerCase());
+    return hits
+        .map((hit) => {
+        const titleLower = hit.title.toLowerCase();
+        const matchedTech = techLower.filter((t) => wordBoundaryMatch(titleLower, t));
+        const techBoost = Math.min(matchedTech.length * 0.2, 0.4);
+        const pointsBoost = Math.min(hit.points / 500, 0.3);
+        const commentsBoost = Math.min(hit.num_comments / 200, 0.2);
+        const score = Math.min(0.1 + techBoost + pointsBoost + commentsBoost, 1.0);
+        return {
+            id: hit.objectID,
+            title: hit.title,
+            url: hit.url,
+            source: "hacker_news",
+            points: hit.points,
+            comments: hit.num_comments,
+            published: hit.created_at,
+            relevanceScore: Math.round(score * 100) / 100,
+            relevanceReason: matchedTech.length > 0
+                ? `Matches your stack: ${matchedTech.join(", ")}`
+                : `Trending (${hit.points} points)`,
+        };
+    })
+        .sort((a, b) => b.relevanceScore - a.relevanceScore)
+        .slice(0, 15);
+}
+const SKIP_TERMS = new Set([
+    "javascript", "typescript", // too generic, floods results
+    "docker", // too broad
+]);
+//# sourceMappingURL=hn-fetcher.js.map

package/dist/live/hn-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hn-fetcher.js","sourceRoot":"","sources":["../../src/live/hn-fetcher.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAMH,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,aAAa;AACxC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,UAAU,GAAG,EAAE,CAAC;AAgBtB,MAAM,OAAO,SAAS;IACZ,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAmB;QAC7B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,QAAQ,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAiB,QAAQ,CAAC,CAAC;YAC5D,OAAO,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM;YAE3C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;wBACvB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kDAAkD;YACpD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAa;QAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,KAAK;YACL,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,UAAU,UAAU,EAAE;YACtC,WAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,GAAG,cAAc,IAAI,MAAM,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,aAAa,CAAC,CAAC;QAEpE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAe,CAAC;YACnD,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,SAAS,YAAY,CAAC,SAAmB;IACvC,8DAA8D;IAC9D,MAAM,WAAW,GAAG,CAAC,GAAG,SAAS,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAEzB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,IAAY;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,OAAO,MAAM,IAAI,KAAK,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,IAAa,EAAE,SAAmB;IACrD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAExD,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,EAAE,GAAG,CAAC,CAAC;QAE3E,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,QAAQ;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,aAAsB;YAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,YAAY;YAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG;YAC7C,eAAe,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;gBACrC,CAAC,CAAC,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjD,CAAC,CAAC,aAAa,GAAG,CAAC,MAAM,UAAU;SACtC,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;SACnD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY,EAAE,YAAY,EAAE,8BAA8B;IAC1D,QAAQ,EAAE,YAAY;CACvB,CAAC,CAAC"}

package/dist/live/index.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Live Intelligence Coordinator
+ *
+ * Orchestrates vulnerability scanning and headline fetching.
+ * Manages cache lifecycle and offline fallback.
+ *
+ * Privacy: Only sends package names/versions (public) and tech keywords (generic).
+ * Set FOURDA_OFFLINE=true to disable all network calls.
+ */
+import type Database from "better-sqlite3";
+import type { ResolvedDependency, VulnerabilityScanResult, LiveHeadline, LiveIntelligenceStatus } from "./types.js";
+export type { VulnerabilityScanResult, VulnerabilityEntry, LiveHeadline, LiveIntelligenceStatus } from "./types.js";
+export declare class LiveIntelligence {
+    private cache;
+    private rateLimiter;
+    private osvScanner;
+    private hnFetcher;
+    private enabled;
+    private lastVulnScan;
+    private lastHeadlines;
+    private resolvedDeps;
+    private initialized;
+    constructor(db: Database.Database);
+    /**
+     * Initialize with project data. Call once after project scan.
+     */
+    initFromProject(projectPath: string, deps: string[], devDeps: string[], language: string): void;
+    /**
+     * Run vulnerability scan (returns cached if fresh, fetches otherwise).
+     */
+    scanVulnerabilities(projectPath: string, options?: {
+        includeDev?: boolean;
+        forceRefresh?: boolean;
+    }): Promise<VulnerabilityScanResult>;
+    /**
+     * Fetch relevant headlines for the user's tech stack.
+     */
+    fetchHeadlines(techStack: string[]): Promise<LiveHeadline[]>;
+    /**
+     * Get last vulnerability scan result (from cache/memory, no network).
+     */
+    getVulnerabilities(): VulnerabilityScanResult | null;
+    /**
+     * Get last headlines (from cache/memory, no network).
+     */
+    getHeadlines(): LiveHeadline[];
+    /**
+     * Get resolved dependencies with versions.
+     */
+    getResolvedDeps(): ResolvedDependency[];
+    isEnabled(): boolean;
+    isInitialized(): boolean;
+    getStatus(): LiveIntelligenceStatus;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/live/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/live/index.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAM3C,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,OAAO,CAAU;IAEzB,OAAO,CAAC,YAAY,CAAwC;IAC5D,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,WAAW,CAAS;gBAEhB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQjC;;OAEG;IACH,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,MAAM,EAAE,EACjB,QAAQ,EAAE,MAAM,GACf,IAAI;IAKP;;OAEG;IACG,mBAAmB,CACvB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GACzD,OAAO,CAAC,uBAAuB,CAAC;IA2BnC;;OAEG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAWlE;;OAEG;IACH,kBAAkB,IAAI,uBAAuB,GAAG,IAAI;IAIpD;;OAEG;IACH,YAAY,IAAI,YAAY,EAAE;IAI9B;;OAEG;IACH,eAAe,IAAI,kBAAkB,EAAE;IAIvC,SAAS,IAAI,OAAO;IAIpB,aAAa,IAAI,OAAO;IAIxB,SAAS,IAAI,sBAAsB;CAUpC"}

package/dist/live/index.js

@@ -0,0 +1,131 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * Live Intelligence Coordinator
+ *
+ * Orchestrates vulnerability scanning and headline fetching.
+ * Manages cache lifecycle and offline fallback.
+ *
+ * Privacy: Only sends package names/versions (public) and tech keywords (generic).
+ * Set FOURDA_OFFLINE=true to disable all network calls.
+ */
+import { LiveCache } from "./cache.js";
+import { RateLimiter, DEFAULT_RATE_LIMITS } from "./rate-limiter.js";
+import { OsvScanner } from "./osv-scanner.js";
+import { HNFetcher } from "./hn-fetcher.js";
+import { resolveVersions } from "./version-resolver.js";
+export class LiveIntelligence {
+    cache;
+    rateLimiter;
+    osvScanner;
+    hnFetcher;
+    enabled;
+    lastVulnScan = null;
+    lastHeadlines = [];
+    resolvedDeps = [];
+    initialized = false;
+    constructor(db) {
+        this.enabled = process.env.FOURDA_OFFLINE !== "true";
+        this.cache = new LiveCache(db);
+        this.rateLimiter = new RateLimiter(DEFAULT_RATE_LIMITS);
+        this.osvScanner = new OsvScanner(this.cache, this.rateLimiter);
+        this.hnFetcher = new HNFetcher(this.cache, this.rateLimiter);
+    }
+    /**
+     * Initialize with project data. Call once after project scan.
+     */
+    initFromProject(projectPath, deps, devDeps, language) {
+        this.resolvedDeps = resolveVersions(projectPath, deps, devDeps, language);
+        this.initialized = true;
+    }
+    /**
+     * Run vulnerability scan (returns cached if fresh, fetches otherwise).
+     */
+    async scanVulnerabilities(projectPath, options) {
+        if (!this.enabled) {
+            return emptyVulnResult(projectPath, true);
+        }
+        const deps = options?.includeDev
+            ? this.resolvedDeps
+            : this.resolvedDeps.filter((d) => !d.isDev);
+        if (deps.length === 0) {
+            return emptyVulnResult(projectPath, false);
+        }
+        if (options?.forceRefresh) {
+            this.cache.invalidateSource("osv");
+        }
+        try {
+            this.lastVulnScan = await this.osvScanner.scan(deps, projectPath);
+            return this.lastVulnScan;
+        }
+        catch {
+            // Network failure — return last known or empty
+            if (this.lastVulnScan)
+                return { ...this.lastVulnScan, offline: true, cached: true };
+            return emptyVulnResult(projectPath, true);
+        }
+    }
+    /**
+     * Fetch relevant headlines for the user's tech stack.
+     */
+    async fetchHeadlines(techStack) {
+        if (!this.enabled)
+            return [];
+        try {
+            this.lastHeadlines = await this.hnFetcher.fetch(techStack);
+            return this.lastHeadlines;
+        }
+        catch {
+            return this.lastHeadlines; // Return last known
+        }
+    }
+    /**
+     * Get last vulnerability scan result (from cache/memory, no network).
+     */
+    getVulnerabilities() {
+        return this.lastVulnScan;
+    }
+    /**
+     * Get last headlines (from cache/memory, no network).
+     */
+    getHeadlines() {
+        return this.lastHeadlines;
+    }
+    /**
+     * Get resolved dependencies with versions.
+     */
+    getResolvedDeps() {
+        return this.resolvedDeps;
+    }
+    isEnabled() {
+        return this.enabled;
+    }
+    isInitialized() {
+        return this.initialized;
+    }
+    getStatus() {
+        return {
+            enabled: this.enabled,
+            offline: !this.enabled,
+            lastOsvRefresh: this.lastVulnScan?.scannedAt || null,
+            lastHnRefresh: this.lastHeadlines.length > 0 ? new Date().toISOString() : null,
+            cachedVulnCount: this.lastVulnScan?.totalVulnerable || 0,
+            cachedHeadlineCount: this.lastHeadlines.length,
+        };
+    }
+}
+function emptyVulnResult(projectPath, offline) {
+    return {
+        scannedAt: new Date().toISOString(),
+        projectPath,
+        ecosystemsScanned: [],
+        totalScanned: 0,
+        totalVulnerable: 0,
+        bySeverity: { critical: 0, high: 0, medium: 0, low: 0, unknown: 0 },
+        vulnerabilities: [],
+        cleanCount: 0,
+        scanDurationMs: 0,
+        cached: false,
+        offline,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/live/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/live/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;;GAQG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAgB,MAAM,uBAAuB,CAAC;AAUtE,MAAM,OAAO,gBAAgB;IACnB,KAAK,CAAY;IACjB,WAAW,CAAc;IACzB,UAAU,CAAa;IACvB,SAAS,CAAY;IACrB,OAAO,CAAU;IAEjB,YAAY,GAAmC,IAAI,CAAC;IACpD,aAAa,GAAmB,EAAE,CAAC;IACnC,YAAY,GAAyB,EAAE,CAAC;IACxC,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,EAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,eAAe,CACb,WAAmB,EACnB,IAAc,EACd,OAAiB,EACjB,QAAgB;QAEhB,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,WAAmB,EACnB,OAA0D;QAE1D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU;YAC9B,CAAC,CAAC,IAAI,CAAC,YAAY;YACnB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpF,OAAO,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,SAAmB;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,SAAS;QACP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO;YACtB,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI;YACpD,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;YAC9E,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,CAAC;YACxD,mBAAmB,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;SAC/C,CAAC;IACJ,CAAC;CACF;AAED,SAAS,eAAe,CAAC,WAAmB,EAAE,OAAgB;IAC5D,OAAO;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW;QACX,iBAAiB,EAAE,EAAE;QACrB,YAAY,EAAE,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACnE,eAAe,EAAE,EAAE;QACnB,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;QACjB,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/live/osv-scanner.d.ts

@@ -0,0 +1,19 @@
+/**
+ * OSV.dev Vulnerability Scanner
+ *
+ * Batch-queries the Open Source Vulnerability database for known CVEs
+ * affecting the user's exact dependency versions. Free, no auth required.
+ *
+ * Privacy: sends only package names + versions (public manifest data).
+ */
+import type { LiveCache } from "./cache.js";
+import type { RateLimiter } from "./rate-limiter.js";
+import type { ResolvedDependency, VulnerabilityScanResult } from "./types.js";
+export declare class OsvScanner {
+    private cache;
+    private rateLimiter;
+    constructor(cache: LiveCache, rateLimiter: RateLimiter);
+    scan(deps: ResolvedDependency[], projectPath: string): Promise<VulnerabilityScanResult>;
+    private batchQuery;
+}
+//# sourceMappingURL=osv-scanner.d.ts.map

package/dist/live/osv-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"osv-scanner.d.ts","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EACV,kBAAkB,EAGlB,uBAAuB,EACxB,MAAM,YAAY,CAAC;AAgBpB,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,WAAW,CAAc;gBAErB,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW;IAKhD,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAiE/E,UAAU;CAuCzB"}

package/dist/live/osv-scanner.js

@@ -0,0 +1,197 @@
+// SPDX-License-Identifier: FSL-1.1-Apache-2.0
+/**
+ * OSV.dev Vulnerability Scanner
+ *
+ * Batch-queries the Open Source Vulnerability database for known CVEs
+ * affecting the user's exact dependency versions. Free, no auth required.
+ *
+ * Privacy: sends only package names + versions (public manifest data).
+ */
+const OSV_BATCH_URL = "https://api.osv.dev/v1/querybatch";
+const OSV_TIMEOUT_MS = 15_000;
+const OSV_CACHE_TTL = 3600; // 1 hour
+const MAX_BATCH_SIZE = 200;
+export class OsvScanner {
+    cache;
+    rateLimiter;
+    constructor(cache, rateLimiter) {
+        this.cache = cache;
+        this.rateLimiter = rateLimiter;
+    }
+    async scan(deps, projectPath) {
+        const start = Date.now();
+        const scannable = deps.filter((d) => d.version !== null).slice(0, MAX_BATCH_SIZE);
+        const ecosystems = [...new Set(scannable.map((d) => d.ecosystem))];
+        // Check cache for each dep individually
+        const uncached = [];
+        const cachedVulns = [];
+        for (const dep of scannable) {
+            const cacheKey = `osv:${dep.ecosystem}:${dep.name}:${dep.version}`;
+            const cached = this.cache.get(cacheKey);
+            if (cached !== null) {
+                cachedVulns.push(...cached);
+            }
+            else {
+                uncached.push(dep);
+            }
+        }
+        // Fetch uncached from OSV
+        let fetchedVulns = [];
+        let offline = false;
+        if (uncached.length > 0) {
+            if (!this.rateLimiter.canProceed("osv")) {
+                offline = true;
+            }
+            else {
+                try {
+                    fetchedVulns = await this.batchQuery(uncached);
+                    this.rateLimiter.consume("osv");
+                }
+                catch {
+                    offline = true;
+                    // Try stale cache for uncached deps
+                    for (const dep of uncached) {
+                        const cacheKey = `osv:${dep.ecosystem}:${dep.name}:${dep.version}`;
+                        const stale = this.cache.getStale(cacheKey);
+                        if (stale)
+                            cachedVulns.push(...stale.data);
+                    }
+                }
+            }
+        }
+        const allVulns = [...cachedVulns, ...fetchedVulns];
+        const vulnerablePackages = new Set(allVulns.map((v) => v.package));
+        const bySeverity = { critical: 0, high: 0, medium: 0, low: 0, unknown: 0 };
+        for (const v of allVulns) {
+            bySeverity[v.severity]++;
+        }
+        return {
+            scannedAt: new Date().toISOString(),
+            projectPath,
+            ecosystemsScanned: ecosystems,
+            totalScanned: scannable.length,
+            totalVulnerable: vulnerablePackages.size,
+            bySeverity,
+            vulnerabilities: allVulns,
+            cleanCount: scannable.length - vulnerablePackages.size,
+            scanDurationMs: Date.now() - start,
+            cached: uncached.length === 0,
+            offline,
+        };
+    }
+    async batchQuery(deps) {
+        const queries = deps.map((d) => ({
+            package: { name: d.name, ecosystem: d.ecosystem },
+            ...(d.version ? { version: d.version } : {}),
+        }));
+        const response = await fetchWithTimeout(OSV_BATCH_URL, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ queries }),
+        }, OSV_TIMEOUT_MS);
+        if (!response.ok) {
+            throw new Error(`OSV API error: ${response.status}`);
+        }
+        const data = (await response.json());
+        const results = [];
+        for (let i = 0; i < data.results.length; i++) {
+            const dep = deps[i];
+            const osvResult = data.results[i];
+            const depVulns = [];
+            if (osvResult.vulns && osvResult.vulns.length > 0) {
+                for (const vuln of osvResult.vulns) {
+                    depVulns.push(mapVulnerability(vuln, dep));
+                }
+            }
+            // Cache per-dep (even empty results to avoid re-fetching clean deps)
+            const cacheKey = `osv:${dep.ecosystem}:${dep.name}:${dep.version}`;
+            this.cache.set(cacheKey, depVulns, "osv", OSV_CACHE_TTL);
+            results.push(...depVulns);
+        }
+        return results;
+    }
+}
+function mapVulnerability(vuln, dep) {
+    const cvssScore = extractCvssScore(vuln.severity);
+    const severity = cvssScore !== null ? cvssToSeverity(cvssScore) : guessSeverityFromId(vuln.id);
+    const fixedVersion = extractFixedVersion(vuln.affected, dep.name, dep.ecosystem);
+    return {
+        package: dep.name,
+        currentVersion: dep.version || "unknown",
+        ecosystem: dep.ecosystem,
+        isDev: dep.isDev,
+        vulnId: vuln.id,
+        aliases: vuln.aliases || [],
+        severity,
+        cvssScore,
+        summary: vuln.summary || vuln.details?.slice(0, 200) || vuln.id,
+        fixedVersion,
+        published: vuln.published || vuln.modified || "",
+        references: (vuln.references || [])
+            .filter((r) => r.type === "ADVISORY" || r.type === "WEB")
+            .map((r) => r.url)
+            .slice(0, 3),
+    };
+}
+function extractCvssScore(severity) {
+    if (!severity || severity.length === 0)
+        return null;
+    for (const s of severity) {
+        if (s.type === "CVSS_V3" || s.type === "CVSS_V4") {
+            // CVSS vector string: "CVSS:3.1/AV:N/AC:L/..." — extract base score
+            const scoreMatch = s.score.match(/(\d+\.?\d*)/);
+            if (scoreMatch)
+                return parseFloat(scoreMatch[1]);
+        }
+    }
+    // Some entries have just a numeric score
+    for (const s of severity) {
+        const num = parseFloat(s.score);
+        if (!isNaN(num) && num >= 0 && num <= 10)
+            return num;
+    }
+    return null;
+}
+function cvssToSeverity(score) {
+    if (score >= 9.0)
+        return "critical";
+    if (score >= 7.0)
+        return "high";
+    if (score >= 4.0)
+        return "medium";
+    if (score > 0)
+        return "low";
+    return "unknown";
+}
+function guessSeverityFromId(id) {
+    // GHSA severity is sometimes encoded in the advisory
+    if (id.startsWith("GHSA-"))
+        return "medium"; // conservative default
+    return "unknown";
+}
+function extractFixedVersion(affected, packageName, ecosystem) {
+    if (!affected)
+        return null;
+    for (const a of affected) {
+        if (a.package.name === packageName && a.package.ecosystem === ecosystem) {
+            for (const range of a.ranges || []) {
+                for (const event of range.events || []) {
+                    if (event.fixed)
+                        return event.fixed;
+                }
+            }
+        }
+    }
+    return null;
+}
+async function fetchWithTimeout(url, options, timeoutMs) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { ...options, signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=osv-scanner.js.map

package/dist/live/osv-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osv-scanner.js","sourceRoot":"","sources":["../../src/live/osv-scanner.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C;;;;;;;GAOG;AAWH,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,SAAS;AACrC,MAAM,cAAc,GAAG,GAAG,CAAC;AAW3B,MAAM,OAAO,UAAU;IACb,KAAK,CAAY;IACjB,WAAW,CAAc;IAEjC,YAAY,KAAgB,EAAE,WAAwB;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA0B,EAAE,WAAmB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEnE,wCAAwC;QACxC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAyB,EAAE,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,QAAQ,CAAC,CAAC;YAC9D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,YAAY,GAAyB,EAAE,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,IAAI,CAAC;oBACf,oCAAoC;oBACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuB,QAAQ,CAAC,CAAC;wBAClE,IAAI,KAAK;4BAAE,WAAW,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAEnE,MAAM,UAAU,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW;YACX,iBAAiB,EAAE,UAAU;YAC7B,YAAY,EAAE,SAAS,CAAC,MAAM;YAC9B,eAAe,EAAE,kBAAkB,CAAC,IAAI;YACxC,UAAU;YACV,eAAe,EAAE,QAAQ;YACzB,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI;YACtD,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAA0B;QACjD,MAAM,OAAO,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE;YACjD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC,CAAC;QAEJ,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;SAClC,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;QACzD,MAAM,OAAO,GAAyB,EAAE,CAAC;QAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAyB,EAAE,CAAC;YAE1C,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;oBACnC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;YAED,qEAAqE;YACrE,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzD,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAsB,EAAE,GAAuB;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAEjF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,IAAI;QACjB,cAAc,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;QACxC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;QAC3B,QAAQ;QACR,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE;QAC/D,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;QAChD,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;aACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4D;IACpF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjD,oEAAoE;YACpE,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,yCAAyC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,qDAAqD;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,uBAAuB;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAkD,EAClD,WAAmB,EACnB,SAAiB;IAEjB,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACxE,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;oBACvC,IAAI,KAAK,CAAC,KAAK;wBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAW,EACX,OAAoB,EACpB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}