@opencodereview/core 1.9.1

package/dist/registry/builtins/python-builtins.js

@@ -0,0 +1,43 @@
+/**
+ * Python standard library modules that don't need registry verification.
+ *
+ * These are modules shipped with CPython and should never be
+ * flagged as hallucinated packages.
+ *
+ * @since 0.4.0 (V4)
+ */
+export const PYTHON_BUILTINS = new Set([
+    // Core
+    'os', 'sys', 're', 'json', 'math', 'random', 'datetime', 'time',
+    'pathlib', 'typing', 'collections', 'functools', 'itertools', 'io',
+    // System
+    'subprocess', 'shutil', 'tempfile', 'logging', 'unittest', 'argparse',
+    'signal', 'ctypes', 'platform',
+    // Crypto / encoding
+    'hashlib', 'hmac', 'secrets', 'base64',
+    // Network
+    'urllib', 'http', 'socket', 'ssl', 'email',
+    // Data formats
+    'csv', 'sqlite3', 'xml', 'html', 'configparser',
+    // OOP / patterns
+    'abc', 'enum', 'dataclasses', 'contextlib',
+    // Concurrency
+    'asyncio', 'concurrent', 'multiprocessing', 'threading', 'queue',
+    // Data manipulation
+    'struct', 'pickle', 'copy', 'pprint',
+    // Introspection / meta
+    'warnings', 'traceback', 'inspect', 'ast', 'importlib',
+    // Archive / compression
+    'zipfile', 'tarfile', 'gzip',
+    // Text
+    'string', 'textwrap',
+    // Compiler / parser
+    'dis', 'token', 'tokenize',
+    // Additional common stdlib modules
+    'types', 'array', 'bisect', 'heapq', 'operator', 'decimal',
+    'fractions', 'statistics', 'cmath', 'glob', 'fnmatch', 'linecache',
+    'codecs', 'unicodedata', 'locale', 'gettext', 'difflib',
+    'weakref', 'shelve', 'dbm', 'lzma', 'bz2', 'zlib',
+    'select', 'selectors', 'mmap', 'atexit', 'sched',
+]);
+//# sourceMappingURL=python-builtins.js.map

package/dist/registry/builtins/python-builtins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-builtins.js","sourceRoot":"","sources":["../../../src/registry/builtins/python-builtins.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,OAAO;IACP,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM;IAC/D,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI;IAElE,SAAS;IACT,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU;IACrE,QAAQ,EAAE,QAAQ,EAAE,UAAU;IAE9B,oBAAoB;IACpB,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ;IAEtC,UAAU;IACV,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO;IAE1C,eAAe;IACf,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc;IAE/C,iBAAiB;IACjB,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY;IAE1C,cAAc;IACd,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,OAAO;IAEhE,oBAAoB;IACpB,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;IAEpC,uBAAuB;IACvB,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW;IAEtD,wBAAwB;IACxB,SAAS,EAAE,SAAS,EAAE,MAAM;IAE5B,OAAO;IACP,QAAQ,EAAE,UAAU;IAEpB,oBAAoB;IACpB,KAAK,EAAE,OAAO,EAAE,UAAU;IAE1B,mCAAmC;IACnC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS;IAC1D,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW;IAClE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACvD,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IACjD,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;CACjD,CAAC,CAAC"}

package/dist/registry/cache.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Registry Cache
+ *
+ * File-based cache for registry lookup results.
+ * Stored at ~/.ocr/registry-cache.json by default.
+ *
+ * Cache structure:
+ * {
+ *   "npm:express": { "result": {...}, "timestamp": 1710000000, "ttl": 86400 },
+ *   "pypi:requests": { "result": {...}, "timestamp": 1710000000, "ttl": 86400 }
+ * }
+ *
+ * @since 0.4.0 (V4)
+ */
+import type { PackageVerifyResult } from './types.js';
+export declare class RegistryCache {
+    private cacheDir;
+    private cacheFile;
+    private cache;
+    private hits;
+    private misses;
+    private loaded;
+    constructor(cacheDir?: string);
+    /**
+     * Get a cached result by key. Returns null on miss or expired entry.
+     */
+    get(key: string): Promise<PackageVerifyResult | null>;
+    /**
+     * Store a result in the cache.
+     */
+    set(key: string, result: PackageVerifyResult, ttlSeconds: number): Promise<void>;
+    /**
+     * Load cache from disk.
+     */
+    load(): Promise<void>;
+    /**
+     * Persist cache to disk.
+     */
+    save(): Promise<void>;
+    /**
+     * Clear all cached entries.
+     */
+    clear(): Promise<void>;
+    /**
+     * Get cache statistics.
+     */
+    stats(): {
+        entries: number;
+        hitRate: number;
+        sizeBytes: number;
+    };
+}
+//# sourceMappingURL=cache.d.ts.map

package/dist/registry/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EAAE,mBAAmB,EAAc,MAAM,YAAY,CAAC;AAElE,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,MAAM,CAAkB;gBAEpB,QAAQ,CAAC,EAAE,MAAM;IAK7B;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAuB3D;;OAEG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtF;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAe3B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyB3B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B;;OAEG;IACH,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;CAqBjE"}

package/dist/registry/cache.js

@@ -0,0 +1,147 @@
+/**
+ * Registry Cache
+ *
+ * File-based cache for registry lookup results.
+ * Stored at ~/.ocr/registry-cache.json by default.
+ *
+ * Cache structure:
+ * {
+ *   "npm:express": { "result": {...}, "timestamp": 1710000000, "ttl": 86400 },
+ *   "pypi:requests": { "result": {...}, "timestamp": 1710000000, "ttl": 86400 }
+ * }
+ *
+ * @since 0.4.0 (V4)
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+export class RegistryCache {
+    cacheDir;
+    cacheFile;
+    cache = new Map();
+    hits = 0;
+    misses = 0;
+    loaded = false;
+    constructor(cacheDir) {
+        this.cacheDir = cacheDir || path.join(os.homedir(), '.ocr');
+        this.cacheFile = path.join(this.cacheDir, 'registry-cache.json');
+    }
+    /**
+     * Get a cached result by key. Returns null on miss or expired entry.
+     */
+    async get(key) {
+        if (!this.loaded) {
+            await this.load();
+        }
+        const entry = this.cache.get(key);
+        if (!entry) {
+            this.misses++;
+            return null;
+        }
+        const now = Math.floor(Date.now() / 1000);
+        if (now - entry.timestamp > entry.ttl) {
+            // Expired
+            this.cache.delete(key);
+            this.misses++;
+            return null;
+        }
+        this.hits++;
+        return { ...entry.result, source: 'cache' };
+    }
+    /**
+     * Store a result in the cache.
+     */
+    async set(key, result, ttlSeconds) {
+        if (!this.loaded) {
+            await this.load();
+        }
+        this.cache.set(key, {
+            result: { ...result },
+            timestamp: Math.floor(Date.now() / 1000),
+            ttl: ttlSeconds,
+        });
+    }
+    /**
+     * Load cache from disk.
+     */
+    async load() {
+        this.loaded = true;
+        try {
+            if (!fs.existsSync(this.cacheFile)) {
+                return;
+            }
+            const data = fs.readFileSync(this.cacheFile, 'utf-8');
+            const parsed = JSON.parse(data);
+            this.cache = new Map(Object.entries(parsed));
+        }
+        catch {
+            // If cache file is corrupted, start fresh
+            this.cache = new Map();
+        }
+    }
+    /**
+     * Persist cache to disk.
+     */
+    async save() {
+        try {
+            if (!fs.existsSync(this.cacheDir)) {
+                fs.mkdirSync(this.cacheDir, { recursive: true });
+            }
+            // Prune expired entries before saving
+            const now = Math.floor(Date.now() / 1000);
+            for (const [key, entry] of this.cache) {
+                if (now - entry.timestamp > entry.ttl) {
+                    this.cache.delete(key);
+                }
+            }
+            const obj = {};
+            for (const [key, entry] of this.cache) {
+                obj[key] = entry;
+            }
+            fs.writeFileSync(this.cacheFile, JSON.stringify(obj, null, 2), 'utf-8');
+        }
+        catch {
+            // Cache persistence failure is non-fatal
+        }
+    }
+    /**
+     * Clear all cached entries.
+     */
+    async clear() {
+        this.cache = new Map();
+        this.hits = 0;
+        this.misses = 0;
+        try {
+            if (fs.existsSync(this.cacheFile)) {
+                fs.unlinkSync(this.cacheFile);
+            }
+        }
+        catch {
+            // Non-fatal
+        }
+    }
+    /**
+     * Get cache statistics.
+     */
+    stats() {
+        const total = this.hits + this.misses;
+        const hitRate = total > 0 ? this.hits / total : 0;
+        // Estimate size
+        let sizeBytes = 0;
+        try {
+            if (fs.existsSync(this.cacheFile)) {
+                sizeBytes = fs.statSync(this.cacheFile).size;
+            }
+        }
+        catch {
+            // Estimate from in-memory data
+            sizeBytes = JSON.stringify(Object.fromEntries(this.cache)).length;
+        }
+        return {
+            entries: this.cache.size,
+            hitRate,
+            sizeBytes,
+        };
+    }
+}
+//# sourceMappingURL=cache.js.map

package/dist/registry/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,OAAO,aAAa;IAChB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC3C,IAAI,GAAW,CAAC,CAAC;IACjB,MAAM,GAAW,CAAC,CAAC;IACnB,MAAM,GAAY,KAAK,CAAC;IAEhC,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACtC,UAAU;YACV,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAA2B,EAAE,UAAkB;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACxC,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA+B,CAAC;YAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;YAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAED,sCAAsC;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtC,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;oBACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAA+B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACnB,CAAC;YAED,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;QACtC,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAElD,gBAAgB;QAChB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClC,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;YAC/B,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACpE,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACxB,OAAO;YACP,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/registry/go-registry.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Go Proxy Registry — module verification against the Go module proxy.
+ *
+ * Supports:
+ * - Standard Go modules (e.g. 'github.com/gin-gonic/gin')
+ * - Go standard library detection (no proxy needed)
+ * - Custom proxy URLs (e.g. GOPROXY)
+ *
+ * @since 0.4.0 (V4)
+ */
+import type { PackageRegistry, PackageVerifyResult, DeprecationInfo, RegistryConfig } from './types.js';
+import { RegistryCache } from './cache.js';
+export declare class GoProxyRegistry implements PackageRegistry {
+    readonly name = "go";
+    readonly language = "go";
+    private baseUrl;
+    private token?;
+    private timeout;
+    private cacheTtl;
+    private cache;
+    constructor(config?: RegistryConfig, cache?: RegistryCache);
+    /**
+     * Check if an import path is a Go standard library package.
+     * Go stdlib packages don't have dots in the first path segment.
+     * Additionally, check against the known stdlib set for top-level packages.
+     */
+    private isStdlib;
+    /**
+     * Verify if a Go module exists.
+     *
+     * 1. Check if it's a Go standard library package
+     * 2. Check cache
+     * 3. Query Go module proxy: GET {proxy}/{module}/@v/list
+     *    - 200 with version list → exists
+     *    - 404 or 410 → does not exist
+     *    - error → assume exists (conservative)
+     */
+    verify(packageName: string): Promise<PackageVerifyResult>;
+    /**
+     * Encode a module path for the Go proxy.
+     * Upper case letters are encoded as !{lowercase}.
+     * e.g., "github.com/Azure/azure-sdk" → "github.com/!azure/azure-sdk"
+     */
+    private encodeModulePath;
+    /**
+     * Check if a Go module is deprecated.
+     * The Go module proxy doesn't directly expose deprecation info.
+     * Future: could check go.mod for "Deprecated:" comments.
+     */
+    checkDeprecated(_packageName: string, _version?: string): Promise<DeprecationInfo | null>;
+}
+//# sourceMappingURL=go-registry.d.ts.map

package/dist/registry/go-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-registry.d.ts","sourceRoot":"","sources":["../../src/registry/go-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxG,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,qBAAa,eAAgB,YAAW,eAAe;IACrD,QAAQ,CAAC,IAAI,QAAQ;IACrB,QAAQ,CAAC,QAAQ,QAAQ;IAEzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAgB;gBAEjB,MAAM,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,aAAa;IAQ1D;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IAchB;;;;;;;;;OASG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAmF/D;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;OAIG;IACG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CAKhG"}

package/dist/registry/go-registry.js

@@ -0,0 +1,148 @@
+/**
+ * Go Proxy Registry — module verification against the Go module proxy.
+ *
+ * Supports:
+ * - Standard Go modules (e.g. 'github.com/gin-gonic/gin')
+ * - Go standard library detection (no proxy needed)
+ * - Custom proxy URLs (e.g. GOPROXY)
+ *
+ * @since 0.4.0 (V4)
+ */
+import { RegistryCache } from './cache.js';
+import { GO_BUILTINS } from './builtins/go-builtins.js';
+export class GoProxyRegistry {
+    name = 'go';
+    language = 'go';
+    baseUrl;
+    token;
+    timeout;
+    cacheTtl;
+    cache;
+    constructor(config, cache) {
+        this.baseUrl = config?.url || 'https://proxy.golang.org';
+        this.token = config?.token;
+        this.timeout = config?.timeoutMs || 5000;
+        this.cacheTtl = config?.cacheTtlSeconds || 86400;
+        this.cache = cache || new RegistryCache();
+    }
+    /**
+     * Check if an import path is a Go standard library package.
+     * Go stdlib packages don't have dots in the first path segment.
+     * Additionally, check against the known stdlib set for top-level packages.
+     */
+    isStdlib(modulePath) {
+        const topLevel = modulePath.split('/')[0];
+        // Go stdlib packages don't contain dots in the first path segment
+        // e.g., "fmt", "net/http", "crypto/tls" are stdlib
+        // e.g., "github.com/foo/bar" is not stdlib
+        if (!topLevel.includes('.')) {
+            // Additionally verify against our known stdlib set
+            return GO_BUILTINS.has(topLevel);
+        }
+        return false;
+    }
+    /**
+     * Verify if a Go module exists.
+     *
+     * 1. Check if it's a Go standard library package
+     * 2. Check cache
+     * 3. Query Go module proxy: GET {proxy}/{module}/@v/list
+     *    - 200 with version list → exists
+     *    - 404 or 410 → does not exist
+     *    - error → assume exists (conservative)
+     */
+    async verify(packageName) {
+        const start = Date.now();
+        // Check standard library first
+        if (this.isStdlib(packageName)) {
+            return {
+                exists: true,
+                name: packageName,
+                source: 'builtin',
+                latencyMs: Date.now() - start,
+            };
+        }
+        // Check cache
+        const cacheKey = `go:${packageName}`;
+        const cached = await this.cache.get(cacheKey);
+        if (cached) {
+            return { ...cached, name: packageName, latencyMs: Date.now() - start };
+        }
+        // Query Go module proxy
+        try {
+            // Module paths are case-sensitive in Go, but proxied with case-encoding
+            // Upper case letters are encoded as !{lowercase}
+            const encodedModule = this.encodeModulePath(packageName);
+            const url = `${this.baseUrl}/${encodedModule}/@v/list`;
+            const headers = {};
+            if (this.token) {
+                headers['Authorization'] = `Bearer ${this.token}`;
+            }
+            const response = await fetch(url, {
+                method: 'GET',
+                headers,
+                signal: AbortSignal.timeout(this.timeout),
+            });
+            const latencyMs = Date.now() - start;
+            if (response.status === 404 || response.status === 410) {
+                const result = {
+                    exists: false,
+                    name: packageName,
+                    source: 'registry',
+                    latencyMs,
+                };
+                await this.cache.set(cacheKey, result, this.cacheTtl);
+                return result;
+            }
+            // Parse version list — last line is latest
+            let version;
+            try {
+                const text = await response.text();
+                const versions = text.trim().split('\n').filter(Boolean);
+                if (versions.length > 0) {
+                    version = versions[versions.length - 1];
+                }
+            }
+            catch {
+                // Could not parse versions
+            }
+            const result = {
+                exists: true,
+                name: packageName,
+                version,
+                source: 'registry',
+                latencyMs,
+            };
+            await this.cache.set(cacheKey, result, this.cacheTtl);
+            return result;
+        }
+        catch {
+            // Network error → assume exists (conservative)
+            return {
+                exists: true,
+                name: packageName,
+                source: 'registry',
+                latencyMs: Date.now() - start,
+            };
+        }
+    }
+    /**
+     * Encode a module path for the Go proxy.
+     * Upper case letters are encoded as !{lowercase}.
+     * e.g., "github.com/Azure/azure-sdk" → "github.com/!azure/azure-sdk"
+     */
+    encodeModulePath(modulePath) {
+        return modulePath.replace(/[A-Z]/g, (c) => `!${c.toLowerCase()}`);
+    }
+    /**
+     * Check if a Go module is deprecated.
+     * The Go module proxy doesn't directly expose deprecation info.
+     * Future: could check go.mod for "Deprecated:" comments.
+     */
+    async checkDeprecated(_packageName, _version) {
+        // Go module proxy does not provide deprecation info via API.
+        // Deprecation is indicated in go.mod with a "Deprecated:" comment.
+        return null;
+    }
+}
+//# sourceMappingURL=go-registry.js.map

package/dist/registry/go-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-registry.js","sourceRoot":"","sources":["../../src/registry/go-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,IAAI,CAAC;IACZ,QAAQ,GAAG,IAAI,CAAC;IAEjB,OAAO,CAAS;IAChB,KAAK,CAAU;IACf,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,KAAK,CAAgB;IAE7B,YAAY,MAAuB,EAAE,KAAqB;QACxD,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,0BAA0B,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,EAAE,eAAe,IAAI,KAAK,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,aAAa,EAAE,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACK,QAAQ,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1C,kEAAkE;QAClE,mDAAmD;QACnD,2CAA2C;QAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,mDAAmD;YACnD,OAAO,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,+BAA+B;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC9B,CAAC;QACJ,CAAC;QAED,cAAc;QACd,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACzE,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC;YACH,wEAAwE;YACxE,iDAAiD;YACjD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,aAAa,UAAU,CAAC;YACvD,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;YACpD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,KAAK;gBACb,OAAO;gBACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;aAC1C,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAErC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAwB;oBAClC,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,UAAU;oBAClB,SAAS;iBACV,CAAC;gBACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,2CAA2C;YAC3C,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;YAED,MAAM,MAAM,GAAwB;gBAClC,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,MAAM,EAAE,UAAU;gBAClB,SAAS;aACV,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAEhB,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;YAC/C,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,UAAkB;QACzC,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,YAAoB,EAAE,QAAiB;QAC3D,6DAA6D;QAC7D,mEAAmE;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/registry/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Registry module — Dynamic package verification.
+ *
+ * @since 0.4.0 (V4)
+ */
+export type { PackageRegistry, PackageVerifyResult, DeprecationInfo, RegistryConfig, RegistryOptions, CacheEntry, } from './types.js';
+export { RegistryCache } from './cache.js';
+export { NpmRegistry } from './npm-registry.js';
+export { PyPIRegistry } from './pypi-registry.js';
+export { MavenRegistry } from './maven-registry.js';
+export { GoProxyRegistry } from './go-registry.js';
+export { RegistryManager } from './registry-manager.js';
+export { NODE_BUILTINS } from './builtins/node-builtins.js';
+export { PYTHON_BUILTINS } from './builtins/python-builtins.js';
+export { JAVA_BUILTINS } from './builtins/java-builtins.js';
+export { GO_BUILTINS } from './builtins/go-builtins.js';
+export { KOTLIN_BUILTINS } from './builtins/kotlin-builtins.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/registry/index.js

@@ -0,0 +1,21 @@
+/**
+ * Registry module — Dynamic package verification.
+ *
+ * @since 0.4.0 (V4)
+ */
+// Cache
+export { RegistryCache } from './cache.js';
+// Registry implementations
+export { NpmRegistry } from './npm-registry.js';
+export { PyPIRegistry } from './pypi-registry.js';
+export { MavenRegistry } from './maven-registry.js';
+export { GoProxyRegistry } from './go-registry.js';
+// Manager
+export { RegistryManager } from './registry-manager.js';
+// Built-in module lists
+export { NODE_BUILTINS } from './builtins/node-builtins.js';
+export { PYTHON_BUILTINS } from './builtins/python-builtins.js';
+export { JAVA_BUILTINS } from './builtins/java-builtins.js';
+export { GO_BUILTINS } from './builtins/go-builtins.js';
+export { KOTLIN_BUILTINS } from './builtins/kotlin-builtins.js';
+//# sourceMappingURL=index.js.map

package/dist/registry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAYH,QAAQ;AACR,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,2BAA2B;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU;AACV,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,wBAAwB;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/registry/maven-registry.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Maven Registry — package verification against Maven Central.
+ *
+ * Supports:
+ * - groupId:artifactId format (e.g. 'org.springframework.boot:spring-boot')
+ * - Java package name lookup (e.g. 'org.springframework.boot')
+ * - Custom Nexus/Artifactory URLs
+ *
+ * Used for both Java and Kotlin packages.
+ *
+ * @since 0.4.0 (V4)
+ */
+import type { PackageRegistry, PackageVerifyResult, DeprecationInfo, RegistryConfig } from './types.js';
+import { RegistryCache } from './cache.js';
+export declare class MavenRegistry implements PackageRegistry {
+    readonly name = "maven";
+    readonly language = "java";
+    private baseUrl;
+    private token?;
+    private timeout;
+    private cacheTtl;
+    private cache;
+    constructor(config?: RegistryConfig, cache?: RegistryCache);
+    /**
+     * Check if a Java/Kotlin import is a standard library package.
+     * Matches against top-level prefixes (e.g. 'java.util' matches 'java.util.List').
+     */
+    private isBuiltin;
+    /**
+     * Extract groupId from a package name or groupId:artifactId format.
+     *
+     * Formats:
+     * - "org.springframework.boot:spring-boot" → groupId: "org.springframework.boot"
+     * - "org.springframework.boot" → groupId: "org.springframework.boot"
+     * - "com.google.guava" → groupId: "com.google.guava"
+     */
+    private extractGroupId;
+    /**
+     * Verify if a Maven package/group exists.
+     *
+     * 1. Check if it's a Java/Kotlin standard library package
+     * 2. Check cache
+     * 3. Query Maven Central Search API:
+     *    GET {baseUrl}/solrsearch/select?q=g:{groupId}&rows=1&wt=json
+     *    - response.numFound > 0 → exists
+     *    - response.numFound === 0 → does not exist
+     *    - error → assume exists (conservative)
+     */
+    verify(packageName: string): Promise<PackageVerifyResult>;
+    /**
+     * Check if a Maven package is deprecated.
+     * Maven Central doesn't have a native deprecation field.
+     * This is a best-effort check — returns null in most cases.
+     */
+    checkDeprecated(_packageName: string, _version?: string): Promise<DeprecationInfo | null>;
+}
+//# sourceMappingURL=maven-registry.d.ts.map

package/dist/registry/maven-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maven-registry.d.ts","sourceRoot":"","sources":["../../src/registry/maven-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxG,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG3C,qBAAa,aAAc,YAAW,eAAe;IACnD,QAAQ,CAAC,IAAI,WAAW;IACxB,QAAQ,CAAC,QAAQ,UAAU;IAE3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAgB;gBAEjB,MAAM,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,EAAE,aAAa;IAQ1D;;;OAGG;IACH,OAAO,CAAC,SAAS;IASjB;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAQtB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6F/D;;;;OAIG;IACG,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;CAKhG"}