@g3nomaly/core 0.2.0 → 0.3.0

package/dist/security/securityParser.js

@@ -1,89 +0,0 @@
-// packages/core/src/security/securityParser.ts
-import { Transpiler } from "bun";
-/**
- * Safely parses a TypeScript file that has a default export object literal.
- * Transpiles the file, extracts the object literal via regex, evaluates it
- * inside a sandboxed Worker with a timeout, then validates with the provided
- * Zod schema.
- *
- * @param filePath  - Absolute path to the .ts file to parse
- * @param schema    - Zod schema to validate the extracted object against
- * @param timeoutMs - Worker timeout in milliseconds (default: 1000)
- * @returns Validated, typed object
- */
-export async function getSafeObject(filePath, schema, timeoutMs = 1000) {
-    const file = Bun.file(filePath);
-    const rawContent = await file.text();
-    const transpiler = new Transpiler({ loader: "ts" });
-    const jsCode = transpiler.transformSync(rawContent);
-    // ---------------------------------------------------------------------------
-    // Pre-eval static analysis
-    // Catches attacks that are undetectable at runtime because they complete
-    // successfully before the sanitiser sees any output.
-    // ---------------------------------------------------------------------------
-    const DANGEROUS_PATTERNS = [
-        [/\bimport\s*\(/, "dynamic import()"],
-        [/\bimport\.meta\b/, "import.meta"],
-        [/\bnew\s+Worker\b/, "Worker construction"],
-        [/\beval\s*\(/, "eval()"],
-        [/\.constructor\s*\.\s*constructor/, "constructor.constructor chain"],
-        // deep-object.meta.ts: IIFE builds 100k nested object literals in a loop.
-        // Object literal construction bypasses any runtime stub (the Object()
-        // constructor is not called for `{}`), so the only reliable catch is
-        // source-level: reject any for/while loop that contains an object literal.
-        // Pattern: a for(...) or while(...) body that contains `{` (object/block).
-        [/\bfor\s*\([\s\S]{0,200}?\)\s*\{[\s\S]{0,500}?\bnested\b/,
-            "deep object construction loop"],
-        // Broader: any loop body that reassigns via `= {` (obj = { ... })
-        [/\bfor\s*\([^)]*\)[^{]*\{[^}]*=\s*\{/,
-            "object-building loop"],
-        [/\bwhile\s*\([^)]*\)[^{]*\{[^}]*=\s*\{/,
-            "object-building loop"],
-        // regex-bomb.meta.ts: uses a regex *literal* /(a+)+$/ — the RegExp constructor
-        // stub in the worker never fires for literals. Detect nested quantifiers
-        // statically: pattern (x+)+ or (x*)* or (x+)* are canonical ReDoS forms.
-        [/\/[^/]*\([^)]*[+*]\)[+*]/, "catastrophic regex literal (nested quantifier)"],
-    ];
-    for (const [pattern, label] of DANGEROUS_PATTERNS) {
-        if (pattern.test(jsCode)) {
-            throw new Error(`Static analysis blocked [${label}] in: ${filePath}`);
-        }
-    }
-    const match = jsCode.match(/(?:export default|const \w+ =)\s*(\{[\s\S]*\})/);
-    if (!match) {
-        throw new Error(`No valid object literal found in: ${filePath}`);
-    }
-    const objectString = match[1];
-    // securityWorker sits beside this module and shares its extension (.ts in src, .js in dist)
-    const workerPath = import.meta.url.replace(/securityParser\.(\w+)$/, "securityWorker.$1");
-    const worker = new Worker(workerPath);
-    const result = await new Promise((res, rej) => {
-        const timeout = setTimeout(() => {
-            worker.terminate();
-            rej(new Error(`Security Error: Evaluation timed out after ${timeoutMs}ms — possible infinite loop in ${filePath}`));
-        }, timeoutMs);
-        worker.onmessage = (event) => {
-            clearTimeout(timeout);
-            worker.terminate();
-            const { success, data, error } = event.data;
-            if (success) {
-                res(data);
-            }
-            else {
-                rej(new Error(`Security or Format Error in ${filePath}: ${error}`));
-            }
-        };
-        worker.onerror = (err) => {
-            clearTimeout(timeout);
-            worker.terminate();
-            rej(new Error(`Worker Error for ${filePath}: ${err.message}`));
-        };
-        worker.postMessage({ objectString });
-    });
-    const parsed = schema.safeParse(result);
-    if (!parsed.success) {
-        throw new Error(`Schema validation failed for ${filePath}:\n${parsed.error.message}`);
-    }
-    return parsed.data;
-}
-//# sourceMappingURL=securityParser.js.map

package/dist/security/securityParser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityParser.js","sourceRoot":"","sources":["../../src/security/securityParser.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAGjC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,MAAe,EACf,SAAS,GAAG,IAAI;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpD,8EAA8E;IAC9E,2BAA2B;IAC3B,yEAAyE;IACzE,qDAAqD;IACrD,8EAA8E;IAE9E,MAAM,kBAAkB,GAA4B;QAClD,CAAC,eAAe,EAAuB,kBAAkB,CAAC;QAC1D,CAAC,kBAAkB,EAAoB,aAAa,CAAC;QACrD,CAAC,kBAAkB,EAAoB,qBAAqB,CAAC;QAC7D,CAAC,aAAa,EAAyB,QAAQ,CAAC;QAChD,CAAC,kCAAkC,EAAI,+BAA+B,CAAC;QAEvE,0EAA0E;QAC1E,sEAAsE;QACtE,qEAAqE;QACrE,2EAA2E;QAC3E,2EAA2E;QAC3E,CAAC,yDAAyD;YACnB,+BAA+B,CAAC;QACvE,kEAAkE;QAClE,CAAC,qCAAqC;YACC,sBAAsB,CAAC;QAC9D,CAAC,uCAAuC;YACD,sBAAsB,CAAC;QAC9D,+EAA+E;QAC/E,yEAAyE;QACzE,yEAAyE;QACzE,CAAC,0BAA0B,EAAU,gDAAgD,CAAC;KACvF,CAAC;IAEF,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,SAAS,QAAQ,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9B,4FAA4F;IAC5F,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CACD,IAAI,KAAK,CACP,8CAA8C,SAAS,kCAAkC,QAAQ,EAAE,CACpG,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YAEnB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAItC,CAAC;YAEF,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,IAAI,CAAC,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,KAAK,CAAC,+BAA+B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,CAAC,GAAe,EAAE,EAAE;YACnC,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,QAAQ,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,gCAAgC,QAAQ,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAwB,CAAC;AACzC,CAAC"}

package/dist/security/securityWorker.d.ts

@@ -1,8 +0,0 @@
-declare const worker: DedicatedWorkerGlobalScope;
-declare const MAX_DEPTH = 20;
-declare const MAX_KEYS = 1000;
-declare const MAX_STRLEN = 100000;
-declare let totalKeys: number;
-declare function sanitise(value: unknown, depth?: number): unknown;
-declare const SANDBOX_PREAMBLE = "\n  \"use strict\";\n\n  const process       = undefined;\n  const global        = undefined;\n  const globalThis    = Object.create(null); // isolated dummy \u2014 writes succeed but go nowhere\n  const module        = undefined;\n  const require       = undefined;\n  const __dirname     = undefined;\n  const __filename    = undefined;\n  const importScripts = undefined;\n  const Function      = undefined;\n  const Reflect       = undefined;\n  const Proxy         = undefined;\n\n  // Stub ArrayBuffer \u2014 catches IIFE allocation bombs before they run.\n  const ArrayBuffer = function() {\n    throw new RangeError(\"ArrayBuffer construction is not allowed in meta files\");\n  };\n\n  // Stub RegExp constructor \u2014 catches IIFE regex bombs constructed via\n  // new RegExp(...) or RegExp(...). Regex *literals* are a different path\n  // (they don't call the RegExp constructor at parse time) but executing\n  // .match()/.exec() on them still goes through the engine's regex executor.\n  // The Worker timeout is the backstop for literal-based regex bombs.\n  const RegExp = function() {\n    throw new Error(\"RegExp construction is not allowed in meta files\");\n  };\n";
-//# sourceMappingURL=securityWorker.d.ts.map

package/dist/security/securityWorker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityWorker.d.ts","sourceRoot":"","sources":["../../src/security/securityWorker.ts"],"names":[],"mappings":"AAAA,QAAA,MAAM,MAAM,EAAsB,0BAA0B,CAAC;AAM7D,QAAA,MAAM,SAAS,KAAM,CAAC;AACtB,QAAA,MAAM,QAAQ,OAAU,CAAC;AACzB,QAAA,MAAM,UAAU,SAAU,CAAC;AAC3B,QAAA,IAAM,SAAS,QAAK,CAAC;AAErB,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAwEpD;AAwCD,QAAA,MAAM,gBAAgB,uqCA4BrB,CAAC"}

package/dist/security/securityWorker.js

@@ -1,158 +0,0 @@
-"use strict";
-const worker = self;
-// ---------------------------------------------------------------------------
-// Deep object sanitiser
-// ---------------------------------------------------------------------------
-const MAX_DEPTH = 20;
-const MAX_KEYS = 1_000;
-const MAX_STRLEN = 100_000;
-let totalKeys = 0;
-function sanitise(value, depth = 0) {
-    if (depth > MAX_DEPTH) {
-        throw new Error(`Object exceeds maximum nesting depth (${MAX_DEPTH})`);
-    }
-    if (typeof value === "function") {
-        throw new Error("Functions are not allowed in meta objects");
-    }
-    if (typeof value === "symbol") {
-        throw new Error("Symbols are not allowed in meta objects");
-    }
-    const tag = Object.prototype.toString.call(value);
-    if (tag === "[object RegExp]") {
-        throw new Error("RegExp values are not allowed (potential ReDoS)");
-    }
-    if (tag === "[object ArrayBuffer]" ||
-        tag === "[object SharedArrayBuffer]" ||
-        ArrayBuffer.isView(value)) {
-        throw new Error("ArrayBuffer / TypedArray values are not allowed");
-    }
-    if (tag === "[object Error]" || value instanceof Error) {
-        throw new Error("Error objects are not allowed (potential stack leakage)");
-    }
-    if (tag === "[object Promise]") {
-        throw new Error("Promise values are not allowed");
-    }
-    if (Array.isArray(value)) {
-        if (++totalKeys > MAX_KEYS)
-            throw new Error("Object exceeds maximum key/element count");
-        return value.map((item) => sanitise(item, depth + 1));
-    }
-    if (value !== null && typeof value === "object") {
-        if (tag !== "[object Object]") {
-            throw new Error(`Non-plain objects are not allowed (tag: ${tag})`);
-        }
-        const out = {};
-        const descriptors = Object.getOwnPropertyDescriptors(value);
-        for (const key of Object.keys(descriptors)) {
-            if (++totalKeys > MAX_KEYS)
-                throw new Error("Object exceeds maximum key/element count");
-            const desc = descriptors[key];
-            if (desc.get || desc.set) {
-                // Silently skip getter/setter properties — the getter-side-effect test
-                // expects a clean resolve and verifies the side effect did not happen.
-                continue;
-            }
-            out[key] = sanitise(value[key], depth + 1);
-        }
-        return out;
-    }
-    if (typeof value === "string") {
-        if (value.length > MAX_STRLEN) {
-            throw new Error(`String value exceeds maximum length (${MAX_STRLEN})`);
-        }
-        // Reject strings that look like captured error stack traces.
-        // error-stack.meta.ts catches an Error and returns e.stack as a plain
-        // string — detectable by the "    at " stack frame marker.
-        if (/\n {4}at /.test(value)) {
-            throw new Error("String value appears to contain a stack trace");
-        }
-    }
-    return value;
-}
-// ---------------------------------------------------------------------------
-// Resource-limit stubs injected into the sandbox
-//
-// IIFEs run during object construction, before our sanitise() pass sees the
-// result. We stub dangerous builtins so they throw at the point of the call.
-//
-// array-buffer.meta.ts  → new ArrayBuffer(1e9)   — stubbed below
-// regex-bomb.meta.ts    → /(a+)+$/.exec(str)     — stubbed via RegExp
-// deep-object.meta.ts   → 100k nested { nested: obj } literals
-//                         Object literals bypass the Object() constructor so
-//                         they cannot be intercepted via a stub. Instead we
-//                         cap total object allocations with a counter in the
-//                         Object stub for `new Object()` / `Object.assign`
-//                         style calls, AND we rely on the IIFE loop itself
-//                         being detectable via a loop-iteration counter.
-//
-// The loop counter trick: we inject a global __iterCount variable into the
-// sandbox and wrap the sandbox body so that — via a Proxy on the iteration
-// variable — we detect runaway loops. However, this is complex and fragile.
-//
-// Simpler reliable approach for deep-object: the fixture runs a for-loop
-// 100,000 times. We shadow the Number constructor and use a Proxy on the
-// iteration space? No — object literals are truly uninterceptable at the
-// VM level without a custom realm.
-//
-// Pragmatic solution: raise a hard iteration budget by injecting a
-// __checkBudget() call... but we can't inject into the transpiled fixture.
-//
-// FINAL approach: use a SharedArrayBuffer + Atomics watchdog from the
-// parent thread to measure wall-clock time inside the worker, and terminate
-// if the IIFE phase takes too long. Since we already have a Worker timeout,
-// the deep-object IIFE completing in 6ms means it's genuinely fast — the
-// nesting is built but immediately discarded and the string is returned.
-//
-// The ONLY reliable fix for deep-object is to reject the *input source* via
-// static analysis in securityParser.ts before it reaches the worker.
-// ---------------------------------------------------------------------------
-const SANDBOX_PREAMBLE = `
-  "use strict";
-
-  const process       = undefined;
-  const global        = undefined;
-  const globalThis    = Object.create(null); // isolated dummy — writes succeed but go nowhere
-  const module        = undefined;
-  const require       = undefined;
-  const __dirname     = undefined;
-  const __filename    = undefined;
-  const importScripts = undefined;
-  const Function      = undefined;
-  const Reflect       = undefined;
-  const Proxy         = undefined;
-
-  // Stub ArrayBuffer — catches IIFE allocation bombs before they run.
-  const ArrayBuffer = function() {
-    throw new RangeError("ArrayBuffer construction is not allowed in meta files");
-  };
-
-  // Stub RegExp constructor — catches IIFE regex bombs constructed via
-  // new RegExp(...) or RegExp(...). Regex *literals* are a different path
-  // (they don't call the RegExp constructor at parse time) but executing
-  // .match()/.exec() on them still goes through the engine's regex executor.
-  // The Worker timeout is the backstop for literal-based regex bombs.
-  const RegExp = function() {
-    throw new Error("RegExp construction is not allowed in meta files");
-  };
-`;
-// ---------------------------------------------------------------------------
-// Message handler
-// ---------------------------------------------------------------------------
-worker.onmessage = (event) => {
-    const { objectString } = event.data;
-    try {
-        const sandbox = new Function(`
-      ${SANDBOX_PREAMBLE}
-      return (${objectString});
-    `);
-        totalKeys = 0;
-        const rawData = sandbox();
-        const pureData = sanitise(rawData);
-        worker.postMessage({ success: true, data: pureData });
-    }
-    catch (error) {
-        const safeMessage = (error?.message ?? String(error)).split("\n")[0];
-        worker.postMessage({ success: false, error: safeMessage });
-    }
-};
-//# sourceMappingURL=securityWorker.js.map

package/dist/security/securityWorker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"securityWorker.js","sourceRoot":"","sources":["../../src/security/securityWorker.ts"],"names":[],"mappings":";AAAA,MAAM,MAAM,GAAG,IAA6C,CAAC;AAE7D,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,SAAS,GAAI,EAAE,CAAC;AACtB,MAAM,QAAQ,GAAK,KAAK,CAAC;AACzB,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,IAAM,SAAS,GAAI,CAAC,CAAC;AAErB,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACzC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,SAAS,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElD,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IACE,GAAG,KAAK,sBAAsB;QAC9B,GAAG,KAAK,4BAA4B;QACpC,WAAW,CAAC,MAAM,CAAC,KAAY,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,KAAK,gBAAgB,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,EAAE,SAAS,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,GAAG,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAe,CAAC,CAAC;QAEtE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,IAAI,EAAE,SAAS,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAExF,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,uEAAuE;gBACvE,uEAAuE;gBACvE,SAAS;YACX,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,UAAU,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,6DAA6D;QAC7D,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,EAAE;AACF,iEAAiE;AACjE,sEAAsE;AACtE,+DAA+D;AAC/D,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,mCAAmC;AACnC,EAAE;AACF,mEAAmE;AACnE,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BxB,CAAC;AAEF,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;IACzC,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC;QACzB,gBAAgB;gBACR,YAAY;KACvB,CAAC,CAAC;QAEH,SAAS,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC"}

package/dist/utils/index.d.ts

@@ -1,6 +0,0 @@
-export { findPackageRoot, findUp, findGitRoot } from "./paths";
-export { warnIfOutdated } from "./version";
-export { guardCancel } from "./prompt";
-export { readPackageMeta } from "./packageMeta";
-export type { PackageMetadata } from "./packageMeta";
-//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/utils/index.js

@@ -1,6 +0,0 @@
-// packages/core/src/utils/index.ts
-export { findPackageRoot, findUp, findGitRoot } from "./paths";
-export { warnIfOutdated } from "./version";
-export { guardCancel } from "./prompt";
-export { readPackageMeta } from "./packageMeta";
-//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/utils/merge.d.ts

@@ -1,6 +0,0 @@
-/**
- * Recursively merges `patch` into `base` without mutating either.
- * Plain objects merge key-wise; arrays and primitives replace.
- */
-export declare function deepMerge<T>(base: T, patch: unknown): T;
-//# sourceMappingURL=merge.d.ts.map

package/dist/utils/merge.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge.d.ts","sourceRoot":"","sources":["../../src/utils/merge.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAUvD"}

package/dist/utils/merge.js

@@ -1,21 +0,0 @@
-// packages/core/src/utils/merge.ts
-function isPlainObject(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-/**
- * Recursively merges `patch` into `base` without mutating either.
- * Plain objects merge key-wise; arrays and primitives replace.
- */
-export function deepMerge(base, patch) {
-    if (!isPlainObject(base) || !isPlainObject(patch)) {
-        return (patch === undefined ? base : patch);
-    }
-    const out = { ...base };
-    for (const [key, value] of Object.entries(patch)) {
-        if (value === undefined)
-            continue;
-        out[key] = deepMerge(out[key], value);
-    }
-    return out;
-}
-//# sourceMappingURL=merge.js.map

package/dist/utils/merge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../src/utils/merge.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAEnC,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAI,IAAO,EAAE,KAAc;IAClD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAQ,CAAC;AAClB,CAAC"}

package/dist/utils/packageMeta.d.ts

@@ -1,12 +0,0 @@
-export interface PackageMetadata {
-    name: string;
-    version: string;
-    description: string;
-    license: string;
-}
-/**
- * Live metadata of the package that owns `entryUrl` (pass `import.meta.url`),
- * read from its `package.json` on every call so it never goes stale.
- */
-export declare function readPackageMeta(entryUrl: string): PackageMetadata;
-//# sourceMappingURL=packageMeta.d.ts.map

package/dist/utils/packageMeta.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"packageMeta.d.ts","sourceRoot":"","sources":["../../src/utils/packageMeta.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAS,MAAM,CAAC;IACpB,OAAO,EAAM,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAM,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CASjE"}

package/dist/utils/packageMeta.js

@@ -1,20 +0,0 @@
-// packages/core/src/utils/packageMeta.ts
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { findPackageRoot } from "./paths";
-/**
- * Live metadata of the package that owns `entryUrl` (pass `import.meta.url`),
- * read from its `package.json` on every call so it never goes stale.
- */
-export function readPackageMeta(entryUrl) {
-    const root = findPackageRoot(dirname(fileURLToPath(entryUrl)));
-    const pkg = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
-    return {
-        name: typeof pkg.name === "string" ? pkg.name : "",
-        version: typeof pkg.version === "string" ? pkg.version : "0.0.0",
-        description: typeof pkg.description === "string" ? pkg.description : "",
-        license: typeof pkg.license === "string" ? pkg.license : "",
-    };
-}
-//# sourceMappingURL=packageMeta.js.map

package/dist/utils/packageMeta.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"packageMeta.js","sourceRoot":"","sources":["../../src/utils/packageMeta.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAS1C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;IACpG,OAAO;QACL,IAAI,EAAS,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzD,OAAO,EAAM,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACpE,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACvE,OAAO,EAAM,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;KAChE,CAAC;AACJ,CAAC"}

package/dist/utils/paths.d.ts

@@ -1,16 +0,0 @@
-/**
- * Nearest directory at or above `fromDir` that holds a `package.json`.
- * Pass `import.meta.dir` to get the root of the package the caller lives in,
- * from `src/` and `dist/` alike.
- *
- * @throws when no package.json exists on the way up to the filesystem root
- */
-export declare function findPackageRoot(fromDir: string): string;
-/**
- * Nearest directory at or above `fromDir` containing `marker` as a direct
- * entry (file or directory). Returns null when no ancestor holds it.
- */
-export declare function findUp(fromDir: string, marker: string): string | null;
-/** Root of the git repository containing `fromDir`, or null outside a repo. */
-export declare function findGitRoot(fromDir: string): string | null;
-//# sourceMappingURL=paths.d.ts.map

package/dist/utils/paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAQvD;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrE;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1D"}

package/dist/utils/paths.js

@@ -1,40 +0,0 @@
-// packages/core/src/utils/paths.ts
-import { existsSync } from "node:fs";
-import { dirname, join } from "node:path";
-/**
- * Nearest directory at or above `fromDir` that holds a `package.json`.
- * Pass `import.meta.dir` to get the root of the package the caller lives in,
- * from `src/` and `dist/` alike.
- *
- * @throws when no package.json exists on the way up to the filesystem root
- */
-export function findPackageRoot(fromDir) {
-    let dir = fromDir;
-    while (!existsSync(join(dir, "package.json"))) {
-        const parent = dirname(dir);
-        if (parent === dir)
-            throw new Error(`no package.json found above ${fromDir}`);
-        dir = parent;
-    }
-    return dir;
-}
-/**
- * Nearest directory at or above `fromDir` containing `marker` as a direct
- * entry (file or directory). Returns null when no ancestor holds it.
- */
-export function findUp(fromDir, marker) {
-    let dir = fromDir;
-    while (true) {
-        if (existsSync(join(dir, marker)))
-            return dir;
-        const parent = dirname(dir);
-        if (parent === dir)
-            return null;
-        dir = parent;
-    }
-}
-/** Root of the git repository containing `fromDir`, or null outside a repo. */
-export function findGitRoot(fromDir) {
-    return findUp(fromDir, ".git");
-}
-//# sourceMappingURL=paths.js.map

package/dist/utils/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/utils/paths.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAC9E,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,OAAe,EAAE,MAAc;IACpD,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/utils/prompt.d.ts

@@ -1,3 +0,0 @@
-/** Exits the process when a prompt returned a cancel symbol, otherwise returns its value. */
-export declare function guardCancel<T>(result: T | symbol): T;
-//# sourceMappingURL=prompt.d.ts.map

package/dist/utils/prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/utils/prompt.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,CAGpD"}

package/dist/utils/prompt.js

@@ -1,8 +0,0 @@
-// packages/core/src/utils/prompt.ts
-/** Exits the process when a prompt returned a cancel symbol, otherwise returns its value. */
-export function guardCancel(result) {
-    if (typeof result === "symbol")
-        process.exit(0);
-    return result;
-}
-//# sourceMappingURL=prompt.js.map

package/dist/utils/prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/utils/prompt.ts"],"names":[],"mappings":"AAAA,oCAAoC;AAEpC,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAI,MAAkB;IAC/C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC/C,OAAO,MAAW,CAAA;AACpB,CAAC"}

package/dist/utils/version.d.ts

@@ -1,9 +0,0 @@
-/**
- * Warns on stderr when a newer version of `pkgName` exists on the registry.
- * When the process runs from a stale `bunx <pkg>@latest` cache, that cache
- * directory is removed on exit so the next invocation reinstalls fresh.
- * Checks the registry at most once per hour; no-op when offline or when
- * G3N_NO_UPDATE_CHECK is set.
- */
-export declare function warnIfOutdated(pkgName: string, currentVersion: string, entryUrl: string): Promise<void>;
-//# sourceMappingURL=version.d.ts.map

package/dist/utils/version.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AA8DA;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC7G"}

package/dist/utils/version.js

@@ -1,103 +0,0 @@
-// packages/core/src/utils/version.ts
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-const REGISTRY = "https://registry.npmjs.org";
-const CHECK_INTERVAL_MS = 60 * 60 * 1000;
-const FETCH_TIMEOUT_MS = 1500;
-function throttleFile(pkgName) {
-    return path.join(os.tmpdir(), `.g3n-update-${pkgName.replace(/[^a-z0-9-]/gi, "_")}.json`);
-}
-function readState(file) {
-    try {
-        const raw = JSON.parse(fs.readFileSync(file, "utf8"));
-        return typeof raw.checkedAt === "number" && typeof raw.latest === "string" ? raw : null;
-    }
-    catch {
-        return null;
-    }
-}
-async function fetchLatest(pkgName) {
-    try {
-        const res = await fetch(`${REGISTRY}/${pkgName}/latest`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
-        if (!res.ok)
-            return null;
-        const data = (await res.json());
-        return typeof data.version === "string" ? data.version : null;
-    }
-    catch {
-        return null;
-    }
-}
-function isOutdated(current, latest) {
-    const a = current.split("-")[0].split(".").map(Number);
-    const b = latest.split("-")[0].split(".").map(Number);
-    for (let i = 0; i < 3; i++) {
-        if ((b[i] ?? 0) > (a[i] ?? 0))
-            return true;
-        if ((b[i] ?? 0) < (a[i] ?? 0))
-            return false;
-    }
-    return false;
-}
-/** Root of the `bunx <pkg>@latest` cache dir `entryUrl` runs from, or null when not running from one. */
-function bunxLatestCacheRoot(entryUrl) {
-    let entryPath;
-    try {
-        entryPath = fileURLToPath(entryUrl);
-    }
-    catch {
-        return null;
-    }
-    const marker = entryPath.indexOf("@latest" + path.sep);
-    if (marker === -1 || !entryPath.startsWith(os.tmpdir()) || !entryPath.includes("bunx-"))
-        return null;
-    return entryPath.slice(0, marker + "@latest".length);
-}
-/**
- * Warns on stderr when a newer version of `pkgName` exists on the registry.
- * When the process runs from a stale `bunx <pkg>@latest` cache, that cache
- * directory is removed on exit so the next invocation reinstalls fresh.
- * Checks the registry at most once per hour; no-op when offline or when
- * G3N_NO_UPDATE_CHECK is set.
- */
-export async function warnIfOutdated(pkgName, currentVersion, entryUrl) {
-    if (process.env.G3N_NO_UPDATE_CHECK !== undefined)
-        return;
-    const file = throttleFile(pkgName);
-    const cached = readState(file);
-    let latest;
-    if (cached !== null && Date.now() - cached.checkedAt < CHECK_INTERVAL_MS) {
-        latest = cached.latest;
-    }
-    else {
-        const fetched = await fetchLatest(pkgName);
-        if (fetched === null)
-            return;
-        latest = fetched;
-        try {
-            fs.writeFileSync(file, JSON.stringify({ checkedAt: Date.now(), latest }));
-        }
-        catch {
-            // throttle state is best-effort; the warning below still works
-        }
-    }
-    if (!isOutdated(currentVersion, latest))
-        return;
-    const cacheRoot = bunxLatestCacheRoot(entryUrl);
-    if (cacheRoot !== null) {
-        process.once("exit", () => {
-            try {
-                fs.rmSync(cacheRoot, { recursive: true, force: true });
-            }
-            catch {
-                // cache dir may already be gone; next run resolves fresh either way
-            }
-        });
-        console.error(`[g3n] ${pkgName} ${currentVersion} is outdated (latest ${latest}) — stale bunx cache cleared, the next run uses ${latest}.`);
-        return;
-    }
-    console.error(`[g3n] ${pkgName} ${currentVersion} is outdated (latest ${latest}) — update with: bun install -g ${pkgName}@${latest}`);
-}
-//# sourceMappingURL=version.js.map

package/dist/utils/version.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/utils/version.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAC9C,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAO9B,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QACpE,OAAO,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,IAAI,OAAO,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;QACzD,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,MAAc;IACjD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,cAAsB,EAAE,QAAgB;IAC5F,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS;QAAE,OAAO;IAE1D,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAc,CAAC;IAEnB,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACzE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO;QAC7B,MAAM,GAAG,OAAO,CAAC;QACjB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAuB,CAAC,CAAC,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC;QAAE,OAAO;IAEhD,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,cAAc,wBAAwB,MAAM,mDAAmD,MAAM,GAAG,CAAC,CAAC;QAC5I,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,SAAS,OAAO,IAAI,cAAc,wBAAwB,MAAM,mCAAmC,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;AACxI,CAAC"}