@prestyj/cli 5.28.1 → 5.29.0

package/dist/core/shell-threats-popular-packages.js

@@ -0,0 +1,675 @@
+/**
+ * Popular package names for the typosquat check in `shell-threats.ts`.
+ *
+ * Hand-maintained and deliberately small (~200 per ecosystem): a name one typo
+ * away from one of these, and not itself on the list, earns a "did you mean"
+ * warning — never a block. Add a legitimate package here when it keeps tripping
+ * the warning (e.g. `tsc` sits next to `tsx`, `moto` next to `mock`).
+ * PyPI names are stored PEP 503-normalised (lowercase, `-` separators).
+ */
+export const POPULAR_NPM_PACKAGES = [
+    // UI frameworks and state
+    "react",
+    "react-dom",
+    "react-router",
+    "react-router-dom",
+    "react-redux",
+    "redux",
+    "redux-thunk",
+    "@reduxjs/toolkit",
+    "next",
+    "vue",
+    "vue-router",
+    "vuex",
+    "pinia",
+    "nuxt",
+    "svelte",
+    "@sveltejs/kit",
+    "@angular/core",
+    "@angular/common",
+    "@angular/cli",
+    "preact",
+    "solid-js",
+    "lit",
+    "jquery",
+    "zustand",
+    "jotai",
+    "mobx",
+    "immer",
+    "immutable",
+    "react-native",
+    "expo",
+    "electron",
+    "electron-builder",
+    "ink",
+    // Utilities
+    "lodash",
+    "lodash-es",
+    "underscore",
+    "ramda",
+    "rxjs",
+    "uuid",
+    "nanoid",
+    "classnames",
+    "clsx",
+    "tailwind-merge",
+    "prop-types",
+    "moment",
+    "dayjs",
+    "date-fns",
+    "luxon",
+    "zod",
+    "yup",
+    "joi",
+    "ajv",
+    "class-validator",
+    "class-transformer",
+    "qs",
+    "query-string",
+    "cookie",
+    "js-cookie",
+    "mime",
+    "mime-types",
+    "ms",
+    "semver",
+    "debug",
+    "dotenv",
+    "dotenv-expand",
+    "cross-env",
+    "yaml",
+    "js-yaml",
+    "ini",
+    "xml2js",
+    "csv-parse",
+    "papaparse",
+    "validator",
+    "crypto-js",
+    "bignumber.js",
+    "decimal.js",
+    "numeral",
+    "async",
+    "bluebird",
+    "p-limit",
+    "p-queue",
+    "eventemitter3",
+    "events",
+    "buffer",
+    "process",
+    "util",
+    "path-browserify",
+    "tslib",
+    "core-js",
+    "regenerator-runtime",
+    "reflect-metadata",
+    "source-map",
+    "source-map-support",
+    "iconv-lite",
+    "safe-buffer",
+    "inherits",
+    "once",
+    "minimatch",
+    "micromatch",
+    "picomatch",
+    "braces",
+    "fast-glob",
+    "globby",
+    "glob",
+    "rimraf",
+    "mkdirp",
+    "fs-extra",
+    "chokidar",
+    "execa",
+    "cross-spawn",
+    "which",
+    "shelljs",
+    "open",
+    "tar",
+    "archiver",
+    "adm-zip",
+    "jszip",
+    // CLI
+    "chalk",
+    "commander",
+    "yargs",
+    "minimist",
+    "inquirer",
+    "ora",
+    "colors",
+    "kleur",
+    "picocolors",
+    "enquirer",
+    "prompts",
+    "meow",
+    "cac",
+    "boxen",
+    "figlet",
+    "cli-table3",
+    "listr2",
+    "zx",
+    // HTTP and servers
+    "axios",
+    "node-fetch",
+    "cross-fetch",
+    "isomorphic-fetch",
+    "whatwg-fetch",
+    "undici",
+    "got",
+    "ky",
+    "superagent",
+    "request",
+    "form-data",
+    "express",
+    "koa",
+    "fastify",
+    "@hapi/hapi",
+    "hono",
+    "body-parser",
+    "cors",
+    "helmet",
+    "morgan",
+    "cookie-parser",
+    "express-session",
+    "multer",
+    "compression",
+    "serve-static",
+    "http-proxy-middleware",
+    "https-proxy-agent",
+    "socks-proxy-agent",
+    "passport",
+    "jsonwebtoken",
+    "bcrypt",
+    "bcryptjs",
+    "ws",
+    "socket.io",
+    "socket.io-client",
+    "graphql",
+    "apollo-server",
+    "@apollo/client",
+    "@trpc/server",
+    "@nestjs/core",
+    "@nestjs/common",
+    "nodemailer",
+    "http-server",
+    "serve",
+    "json-server",
+    // Data
+    "mongoose",
+    "mongodb",
+    "mysql",
+    "mysql2",
+    "pg",
+    "sequelize",
+    "typeorm",
+    "prisma",
+    "@prisma/client",
+    "knex",
+    "redis",
+    "ioredis",
+    "sqlite3",
+    "better-sqlite3",
+    "drizzle-orm",
+    "firebase",
+    "firebase-admin",
+    "aws-sdk",
+    "@aws-sdk/client-s3",
+    "stripe",
+    "openai",
+    "@anthropic-ai/sdk",
+    "langchain",
+    "bull",
+    "bullmq",
+    "kafkajs",
+    "amqplib",
+    "node-cron",
+    "cron",
+    // Logging
+    "winston",
+    "pino",
+    "bunyan",
+    "log4js",
+    // Content
+    "sharp",
+    "jimp",
+    "canvas",
+    "cheerio",
+    "jsdom",
+    "marked",
+    "markdown-it",
+    "highlight.js",
+    "prismjs",
+    "handlebars",
+    "ejs",
+    "pug",
+    "mustache",
+    "d3",
+    "chart.js",
+    "three",
+    "styled-components",
+    "@emotion/react",
+    "@emotion/styled",
+    "@mui/material",
+    "@mui/icons-material",
+    "antd",
+    "bootstrap",
+    "@chakra-ui/react",
+    "framer-motion",
+    "react-icons",
+    "lucide-react",
+    "@radix-ui/react-dialog",
+    "@tanstack/react-query",
+    "react-query",
+    "swr",
+    "formik",
+    "react-hook-form",
+    // Build and test tooling
+    "typescript",
+    "tsc",
+    "tsx",
+    "ts-node",
+    "@types/node",
+    "@types/react",
+    "@types/react-dom",
+    "@types/express",
+    "@types/jest",
+    "@types/lodash",
+    "eslint",
+    "prettier",
+    "eslint-config-prettier",
+    "eslint-plugin-react",
+    "eslint-plugin-import",
+    "eslint-plugin-react-hooks",
+    "eslint-plugin-jsx-a11y",
+    "eslint-config-airbnb",
+    "@typescript-eslint/parser",
+    "@typescript-eslint/eslint-plugin",
+    "typescript-eslint",
+    "stylelint",
+    "jest",
+    "ts-jest",
+    "vitest",
+    "mocha",
+    "chai",
+    "sinon",
+    "supertest",
+    "nock",
+    "msw",
+    "@faker-js/faker",
+    "@testing-library/react",
+    "@testing-library/jest-dom",
+    "@testing-library/user-event",
+    "jest-environment-jsdom",
+    "happy-dom",
+    "cypress",
+    "playwright",
+    "@playwright/test",
+    "puppeteer",
+    "puppeteer-core",
+    "webpack",
+    "webpack-cli",
+    "webpack-dev-server",
+    "babel-loader",
+    "css-loader",
+    "style-loader",
+    "sass-loader",
+    "html-webpack-plugin",
+    "mini-css-extract-plugin",
+    "vite",
+    "@vitejs/plugin-react",
+    "rollup",
+    "@rollup/plugin-node-resolve",
+    "@rollup/plugin-commonjs",
+    "esbuild",
+    "parcel",
+    "tsup",
+    "unbuild",
+    "turbo",
+    "nx",
+    "lerna",
+    "@babel/core",
+    "@babel/preset-env",
+    "@babel/preset-react",
+    "@babel/preset-typescript",
+    "@babel/cli",
+    "@babel/runtime",
+    "terser",
+    "uglify-js",
+    "acorn",
+    "postcss",
+    "autoprefixer",
+    "tailwindcss",
+    "sass",
+    "less",
+    "cssnano",
+    "nodemon",
+    "concurrently",
+    "husky",
+    "lint-staged",
+    "@commitlint/cli",
+    "semantic-release",
+    "pm2",
+    "storybook",
+    "@storybook/react",
+    "pnpm",
+    "yarn",
+    "npm",
+    "create-react-app",
+    "create-next-app",
+    "create-vite",
+    "degit",
+    "ts-morph",
+];
+export const POPULAR_PYPI_PACKAGES = [
+    // Core and packaging
+    "pip",
+    "setuptools",
+    "wheel",
+    "six",
+    "packaging",
+    "typing-extensions",
+    "certifi",
+    "idna",
+    "charset-normalizer",
+    "chardet",
+    "urllib3",
+    "requests",
+    "python-dateutil",
+    "pyyaml",
+    "attrs",
+    "cattrs",
+    "filelock",
+    "platformdirs",
+    "distlib",
+    "importlib-metadata",
+    "zipp",
+    "decorator",
+    "wrapt",
+    "deprecated",
+    "virtualenv",
+    "pipenv",
+    "poetry",
+    "poetry-core",
+    "hatchling",
+    "build",
+    "twine",
+    "setuptools-scm",
+    "cython",
+    "pybind11",
+    "cmake",
+    "ninja",
+    "toml",
+    "tomli",
+    "tomlkit",
+    "configparser",
+    "regex",
+    "more-itertools",
+    "toolz",
+    "cachetools",
+    "sortedcontainers",
+    "pytz",
+    "tzdata",
+    "tzlocal",
+    "arrow",
+    "pendulum",
+    "python-dotenv",
+    "environs",
+    "psutil",
+    "pywin32",
+    "pyinstaller",
+    "pexpect",
+    "typer",
+    "click",
+    "fire",
+    "docopt",
+    "rich",
+    "colorama",
+    "termcolor",
+    "tabulate",
+    "prettytable",
+    "tqdm",
+    "loguru",
+    "structlog",
+    "tenacity",
+    "backoff",
+    "retry",
+    // Crypto and auth
+    "cryptography",
+    "cffi",
+    "pycparser",
+    "pyasn1",
+    "rsa",
+    "pyjwt",
+    "python-jose",
+    "passlib",
+    "bcrypt",
+    "pynacl",
+    "pyopenssl",
+    "oauthlib",
+    "requests-oauthlib",
+    "google-auth",
+    // Web
+    "flask",
+    "django",
+    "djangorestframework",
+    "django-cors-headers",
+    "channels",
+    "whitenoise",
+    "fastapi",
+    "uvicorn",
+    "starlette",
+    "gunicorn",
+    "werkzeug",
+    "itsdangerous",
+    "jinja2",
+    "markupsafe",
+    "mako",
+    "flask-cors",
+    "flask-sqlalchemy",
+    "flask-login",
+    "sanic",
+    "falcon",
+    "bottle",
+    "pyramid",
+    "tornado",
+    "aiohttp",
+    "httpx",
+    "httpcore",
+    "h11",
+    "anyio",
+    "sniffio",
+    "multidict",
+    "yarl",
+    "frozenlist",
+    "aiosignal",
+    "async-timeout",
+    "aiofiles",
+    "websockets",
+    "websocket-client",
+    "python-multipart",
+    "email-validator",
+    "pydantic",
+    "pydantic-core",
+    "pydantic-settings",
+    "marshmallow",
+    "jsonschema",
+    "simplejson",
+    "ujson",
+    "orjson",
+    "msgpack",
+    "protobuf",
+    "grpcio",
+    "grpcio-tools",
+    "googleapis-common-protos",
+    "google-api-core",
+    "beautifulsoup4",
+    "bs4",
+    "lxml",
+    "html5lib",
+    "soupsieve",
+    "scrapy",
+    "selenium",
+    "playwright",
+    "pyppeteer",
+    "streamlit",
+    "gradio",
+    "dash",
+    // Data, storage and cloud
+    "sqlalchemy",
+    "alembic",
+    "sqlmodel",
+    "peewee",
+    "psycopg2",
+    "psycopg2-binary",
+    "psycopg",
+    "asyncpg",
+    "aiosqlite",
+    "pymysql",
+    "mysqlclient",
+    "pymongo",
+    "motor",
+    "redis",
+    "elasticsearch",
+    "celery",
+    "kombu",
+    "boto3",
+    "botocore",
+    "s3transfer",
+    "jmespath",
+    "moto",
+    "boto",
+    "azure-core",
+    "azure-storage-blob",
+    "azure-identity",
+    "google-cloud-storage",
+    "docker",
+    "kubernetes",
+    "paramiko",
+    "fabric",
+    "invoke",
+    "ansible",
+    "sentry-sdk",
+    "prometheus-client",
+    // Science and ML
+    "numpy",
+    "pandas",
+    "scipy",
+    "scikit-learn",
+    "matplotlib",
+    "seaborn",
+    "plotly",
+    "bokeh",
+    "altair",
+    "pillow",
+    "opencv-python",
+    "scikit-image",
+    "imageio",
+    "tensorflow",
+    "keras",
+    "torch",
+    "torchvision",
+    "torchaudio",
+    "transformers",
+    "tokenizers",
+    "huggingface-hub",
+    "datasets",
+    "accelerate",
+    "safetensors",
+    "sentencepiece",
+    "sentence-transformers",
+    "openai",
+    "anthropic",
+    "langchain",
+    "langchain-core",
+    "langchain-community",
+    "tiktoken",
+    "nltk",
+    "spacy",
+    "gensim",
+    "xgboost",
+    "lightgbm",
+    "catboost",
+    "statsmodels",
+    "sympy",
+    "networkx",
+    "numba",
+    "llvmlite",
+    "pyarrow",
+    "polars",
+    "dask",
+    "joblib",
+    "threadpoolctl",
+    "jax",
+    "jaxlib",
+    "flax",
+    "optax",
+    "einops",
+    "onnx",
+    "onnxruntime",
+    "mlflow",
+    "wandb",
+    "tensorboard",
+    "optuna",
+    "ray",
+    "chromadb",
+    "faiss-cpu",
+    "shapely",
+    "geopandas",
+    "folium",
+    "pyproj",
+    "openpyxl",
+    "xlrd",
+    "xlsxwriter",
+    "python-docx",
+    "pypdf",
+    "pypdf2",
+    "reportlab",
+    // Dev and test
+    "pytest",
+    "pytest-cov",
+    "pytest-mock",
+    "pytest-asyncio",
+    "coverage",
+    "mock",
+    "tox",
+    "nox",
+    "hypothesis",
+    "responses",
+    "freezegun",
+    "faker",
+    "factory-boy",
+    "black",
+    "isort",
+    "flake8",
+    "pylint",
+    "mypy",
+    "ruff",
+    "autopep8",
+    "yapf",
+    "pre-commit",
+    "types-requests",
+    "sphinx",
+    "docutils",
+    "mkdocs",
+    "mkdocs-material",
+    "markdown",
+    "pygments",
+    "jupyter",
+    "notebook",
+    "jupyterlab",
+    "ipython",
+    "ipykernel",
+    "ipywidgets",
+    "nbformat",
+    "nbconvert",
+    "traitlets",
+    "pyzmq",
+    "greenlet",
+    "gevent",
+    "eventlet",
+    "uvloop",
+    "watchdog",
+    "pygame",
+    "pyqt5",
+    "pyside6",
+    "pyserial",
+];
+//# sourceMappingURL=shell-threats-popular-packages.js.map

package/dist/core/shell-threats-popular-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-threats-popular-packages.js","sourceRoot":"","sources":["../../src/core/shell-threats-popular-packages.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,0BAA0B;IAC1B,OAAO;IACP,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,aAAa;IACb,OAAO;IACP,aAAa;IACb,kBAAkB;IAClB,MAAM;IACN,KAAK;IACL,YAAY;IACZ,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,eAAe;IACf,eAAe;IACf,iBAAiB;IACjB,cAAc;IACd,QAAQ;IACR,UAAU;IACV,KAAK;IACL,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,WAAW;IACX,cAAc;IACd,MAAM;IACN,UAAU;IACV,kBAAkB;IAClB,KAAK;IACL,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,UAAU;IACV,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,iBAAiB;IACjB,mBAAmB;IACnB,IAAI;IACJ,cAAc;IACd,QAAQ;IACR,WAAW;IACX,MAAM;IACN,YAAY;IACZ,IAAI;IACJ,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,eAAe;IACf,WAAW;IACX,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,cAAc;IACd,YAAY;IACZ,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,SAAS;IACT,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,iBAAiB;IACjB,OAAO;IACP,SAAS;IACT,qBAAqB;IACrB,kBAAkB;IAClB,YAAY;IACZ,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,MAAM;IACN,WAAW;IACX,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,OAAO;IACP,aAAa;IACb,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,WAAW;IACX,OAAO;IACP,UAAU;IACV,UAAU;IACV,KAAK;IACL,QAAQ;IACR,OAAO;IACP,YAAY;IACZ,UAAU;IACV,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,IAAI;IACJ,mBAAmB;IACnB,OAAO;IACP,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,QAAQ;IACR,KAAK;IACL,IAAI;IACJ,YAAY;IACZ,SAAS;IACT,WAAW;IACX,SAAS;IACT,KAAK;IACL,SAAS;IACT,YAAY;IACZ,MAAM;IACN,aAAa;IACb,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,iBAAiB;IACjB,QAAQ;IACR,aAAa;IACb,cAAc;IACd,uBAAuB;IACvB,mBAAmB;IACnB,mBAAmB;IACnB,UAAU;IACV,cAAc;IACd,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,WAAW;IACX,kBAAkB;IAClB,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,OAAO;IACP,aAAa;IACb,OAAO;IACP,UAAU;IACV,SAAS;IACT,OAAO;IACP,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,SAAS;IACT,QAAQ;IACR,gBAAgB;IAChB,MAAM;IACN,OAAO;IACP,SAAS;IACT,SAAS;IACT,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,oBAAoB;IACpB,QAAQ;IACR,QAAQ;IACR,mBAAmB;IACnB,WAAW;IACX,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,WAAW;IACX,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,aAAa;IACb,cAAc;IACd,SAAS;IACT,YAAY;IACZ,KAAK;IACL,KAAK;IACL,UAAU;IACV,IAAI;IACJ,UAAU;IACV,OAAO;IACP,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;IACf,qBAAqB;IACrB,MAAM;IACN,WAAW;IACX,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,cAAc;IACd,wBAAwB;IACxB,uBAAuB;IACvB,aAAa;IACb,KAAK;IACL,QAAQ;IACR,iBAAiB;IACjB,yBAAyB;IACzB,YAAY;IACZ,KAAK;IACL,KAAK;IACL,SAAS;IACT,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,QAAQ;IACR,UAAU;IACV,wBAAwB;IACxB,qBAAqB;IACrB,sBAAsB;IACtB,2BAA2B;IAC3B,wBAAwB;IACxB,sBAAsB;IACtB,2BAA2B;IAC3B,kCAAkC;IAClC,mBAAmB;IACnB,WAAW;IACX,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,WAAW;IACX,MAAM;IACN,KAAK;IACL,iBAAiB;IACjB,wBAAwB;IACxB,2BAA2B;IAC3B,6BAA6B;IAC7B,wBAAwB;IACxB,WAAW;IACX,SAAS;IACT,YAAY;IACZ,kBAAkB;IAClB,WAAW;IACX,gBAAgB;IAChB,SAAS;IACT,aAAa;IACb,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,yBAAyB;IACzB,MAAM;IACN,sBAAsB;IACtB,QAAQ;IACR,6BAA6B;IAC7B,yBAAyB;IACzB,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,IAAI;IACJ,OAAO;IACP,aAAa;IACb,mBAAmB;IACnB,qBAAqB;IACrB,0BAA0B;IAC1B,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,WAAW;IACX,OAAO;IACP,SAAS;IACT,cAAc;IACd,aAAa;IACb,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,cAAc;IACd,OAAO;IACP,aAAa;IACb,iBAAiB;IACjB,kBAAkB;IAClB,KAAK;IACL,WAAW;IACX,kBAAkB;IAClB,MAAM;IACN,MAAM;IACN,KAAK;IACL,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,OAAO;IACP,UAAU;CACX,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,qBAAqB;IACrB,KAAK;IACL,YAAY;IACZ,OAAO;IACP,KAAK;IACL,WAAW;IACX,mBAAmB;IACnB,SAAS;IACT,MAAM;IACN,oBAAoB;IACpB,SAAS;IACT,SAAS;IACT,UAAU;IACV,iBAAiB;IACjB,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,cAAc;IACd,SAAS;IACT,oBAAoB;IACpB,MAAM;IACN,WAAW;IACX,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;IACP,OAAO;IACP,gBAAgB;IAChB,QAAQ;IACR,UAAU;IACV,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,cAAc;IACd,OAAO;IACP,gBAAgB;IAChB,OAAO;IACP,YAAY;IACZ,kBAAkB;IAClB,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,eAAe;IACf,UAAU;IACV,QAAQ;IACR,SAAS;IACT,aAAa;IACb,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,WAAW;IACX,UAAU;IACV,aAAa;IACb,MAAM;IACN,QAAQ;IACR,WAAW;IACX,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,cAAc;IACd,MAAM;IACN,WAAW;IACX,QAAQ;IACR,KAAK;IACL,OAAO;IACP,aAAa;IACb,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,aAAa;IACb,MAAM;IACN,OAAO;IACP,QAAQ;IACR,qBAAqB;IACrB,qBAAqB;IACrB,UAAU;IACV,YAAY;IACZ,SAAS;IACT,SAAS;IACT,WAAW;IACX,UAAU;IACV,UAAU;IACV,cAAc;IACd,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,UAAU;IACV,KAAK;IACL,OAAO;IACP,SAAS;IACT,WAAW;IACX,MAAM;IACN,YAAY;IACZ,WAAW;IACX,eAAe;IACf,UAAU;IACV,YAAY;IACZ,kBAAkB;IAClB,kBAAkB;IAClB,iBAAiB;IACjB,UAAU;IACV,eAAe;IACf,mBAAmB;IACnB,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;IACR,cAAc;IACd,0BAA0B;IAC1B,iBAAiB;IACjB,gBAAgB;IAChB,KAAK;IACL,MAAM;IACN,UAAU;IACV,WAAW;IACX,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,WAAW;IACX,WAAW;IACX,QAAQ;IACR,MAAM;IACN,0BAA0B;IAC1B,YAAY;IACZ,SAAS;IACT,UAAU;IACV,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,SAAS;IACT,SAAS;IACT,WAAW;IACX,SAAS;IACT,aAAa;IACb,SAAS;IACT,OAAO;IACP,OAAO;IACP,eAAe;IACf,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,YAAY;IACZ,UAAU;IACV,MAAM;IACN,MAAM;IACN,YAAY;IACZ,oBAAoB;IACpB,gBAAgB;IAChB,sBAAsB;IACtB,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,mBAAmB;IACnB,iBAAiB;IACjB,OAAO;IACP,QAAQ;IACR,OAAO;IACP,cAAc;IACd,YAAY;IACZ,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,cAAc;IACd,SAAS;IACT,YAAY;IACZ,OAAO;IACP,OAAO;IACP,aAAa;IACb,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,aAAa;IACb,eAAe;IACf,uBAAuB;IACvB,QAAQ;IACR,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,qBAAqB;IACrB,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,aAAa;IACb,OAAO;IACP,UAAU;IACV,OAAO;IACP,UAAU;IACV,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,eAAe;IACf,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,aAAa;IACb,QAAQ;IACR,OAAO;IACP,aAAa;IACb,QAAQ;IACR,KAAK;IACL,UAAU;IACV,WAAW;IACX,SAAS;IACT,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,YAAY;IACZ,aAAa;IACb,OAAO;IACP,QAAQ;IACR,WAAW;IACX,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,gBAAgB;IAChB,UAAU;IACV,MAAM;IACN,KAAK;IACL,KAAK;IACL,YAAY;IACZ,WAAW;IACX,WAAW;IACX,OAAO;IACP,aAAa;IACb,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,iBAAiB;IACjB,UAAU;IACV,UAAU;IACV,SAAS;IACT,UAAU;IACV,YAAY;IACZ,SAAS;IACT,WAAW;IACX,YAAY;IACZ,UAAU;IACV,WAAW;IACX,WAAW;IACX,OAAO;IACP,UAAU;IACV,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,UAAU;CACX,CAAC"}

package/dist/core/shell-threats.d.ts

@@ -0,0 +1,8 @@
+export interface ShellThreat {
+    rule: string;
+    severity: "block" | "warn";
+    detail: string;
+}
+export declare function checkShellThreats(command: string): ShellThreat[];
+/** First blocking threat as a refusal message, or null when the command may run. */
+export declare function shellThreatBlockMessage(command: string): string | null;