@prestyj/cli 5.32.0 → 5.32.2

package/dist/core/network-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"network-guard.js","sourceRoot":"","sources":["../../src/core/network-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAwB;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;YAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,SAAS,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,IAAI,IAAI,SAAS,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,cAAc,GAA2B;IAC7C,GAAG,EAAE,oBAAoB;IACzB,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,sBAAsB;IAC5B,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACpG,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzF,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,mBAAmB,GAAG,KAAK;IACnE,IAAI,mBAAmB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1F,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,0EAA0E;IAC1E,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO;aACnB,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,WAAW,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;YAAE,KAAK,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAErC,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC1F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjF,IAAI,IAAI;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACpD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,kDAAkD;gBAClD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;oBACpC,IAAI,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxF,sEAAsE;YACtE,2CAA2C;YAC3C,MAAM,mBAAmB,GAAG,OAAO,KAAK,KAAK,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBACzD,IAAI,IAAI,EAAE,CAAC;oBACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAChB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,IAAyB,EACzB,KAAwB;IAExB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,OAAO,CACL,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC3D,kBAAkB,OAAO,8DAA8D;QACvF,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAyB,EACzB,KAAwB;IAExB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,qCAAqC,GAAG,0BAA0B,CAAC;IACrF,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,OAAO,CACL,qCAAqC,IAAI,oBAAoB,OAAO,IAAI;QACxE,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAUD,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAA4B;IACtE,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAA4B;IAC9E,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,SAAuC,EACvC,MAAmB,EACnB,GAAsE;IAEtE,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,GAAG,OAAO,CAAC;YACjB,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,EAAE,CAAC;IACR,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9E,UAAU,GAAG,OAAO,CAAC;YACrB,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;QACR,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"network-guard.js","sourceRoot":"","sources":["../../src/core/network-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAwB;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;YAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,SAAS,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,IAAI,IAAI,SAAS,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,cAAc,GAA2B;IAC7C,GAAG,EAAE,oBAAoB;IACzB,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,sBAAsB;IAC5B,GAAG,EAAE,oBAAoB;IACzB,GAAG,EAAE,UAAU;IACf,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACpG,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzF,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,mBAAmB,GAAG,KAAK;IACnE,IAAI,mBAAmB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1F,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrF,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,0EAA0E;IAC1E,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO;aACnB,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC;aACZ,GAAG,CAAC,WAAW,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAElC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM;YAAE,KAAK,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAErC,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC1F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjF,IAAI,IAAI;oBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACpD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,kDAAkD;gBAClD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;oBACpC,IAAI,IAAI;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxF,sEAAsE;YACtE,2CAA2C;YAC3C,MAAM,mBAAmB,GAAG,OAAO,KAAK,KAAK,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;gBACzD,IAAI,IAAI,EAAE,CAAC;oBACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAChB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,IAAyB,EACzB,KAAwB;IAExB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,OAAO,CACL,qCAAqC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC3D,kBAAkB,OAAO,8DAA8D;QACvF,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,IAAyB,EACzB,KAAwB;IAExB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,qCAAqC,GAAG,0BAA0B,CAAC;IACrF,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/D,OAAO,CACL,qCAAqC,IAAI,oBAAoB,OAAO,IAAI;QACxE,2DAA2D,CAC5D,CAAC;AACJ,CAAC;AAUD,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,SAA4B;IACtE,2EAA2E;IAC3E,iCAAiC;IACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAA4B;IAC9E,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,SAAuC,EACvC,MAAmB,EACnB,GAAsE;IAEtE,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtD,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,GAAG,OAAO,CAAC;YACjB,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,EAAE,CAAC;IACR,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9E,UAAU,GAAG,OAAO,CAAC;YACrB,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;QACR,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/core/package-cooldown.d.ts

@@ -0,0 +1,71 @@
+export type PackageManager = "npm" | "pnpm" | "yarn" | "bun" | "pip" | "uv";
+/** How to spawn `<manager> --version`. Windows: npm/pnpm/yarn are `.cmd` shims, which need a shell. */
+export declare function versionSpawn(manager: PackageManager, platform?: NodeJS.Platform): {
+    file: string;
+    args: string[];
+    shell: boolean;
+};
+/**
+ * `<manager> --version`, once per process (yarn: once per directory, since
+ * berry is pinned per project); null when missing.
+ */
+export declare function managerVersion(manager: PackageManager, cwd?: string): Promise<string | null>;
+/** Whether `manager` at `version` honours the cooldown we apply. */
+export declare function hasNativeCooldown(manager: PackageManager, version: string | null): boolean;
+/** Package managers a command mentions (cheap regex, no spawn). */
+export declare function mentionedManagers(command: string): PackageManager[];
+/** Cheap regex: could this command install packages? Non-installs skip every spawn and file read. */
+export declare function mayInstall(command: string): boolean;
+export declare function uvResolves(command: string): boolean;
+/**
+ * Whether installs here may come from a registry other than public npm
+ * (command `--registry`, `npm_config_registry`, a `registry=` /
+ * `@scope:registry=` line in .npmrc up the tree or in ~/.npmrc,
+ * `npmRegistryServer` in .yarnrc.yml). Cheap sync reads, install commands only.
+ */
+export declare function usesCustomNpmRegistry(command: string, cwd: string, env?: NodeJS.ProcessEnv): boolean;
+/** Whether pip/uv may install from an index other than PyPI (flags, env, pip.conf). */
+export declare function usesCustomPypiIndex(command: string, env?: NodeJS.ProcessEnv): boolean;
+export interface CooldownEnvOptions {
+    days: number;
+    now: number;
+    cwd: string;
+    /** Detected versions; a manager without one gets nothing (avoids unknown-config warnings/errors). */
+    versions: Partial<Record<PackageManager, string | null>>;
+    /** Environment to read registry settings from (default process.env). */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Cooldown environment variables for `command`:
+ * - npm `min-release-age` (days), npm ≥ 11.10 only (older npm warns on it).
+ * - pnpm `minimum-release-age` (minutes) via npm_config_, only when the
+ *   command runs pnpm (npm warns on this key).
+ * - yarn berry ≥ 4.10 `YARN_NPM_MINIMAL_AGE_GATE` (minutes).
+ * - pip `PIP_UPLOADED_PRIOR_TO` relative ISO duration (older pip ignores it).
+ * - uv `UV_EXCLUDE_NEWER` absolute timestamp: always without `uv.lock`; with
+ *   one only for resolving commands (plain `uv sync`/`uv run` keep the lock;
+ *   the lockfile check covers those).
+ */
+export declare function packageCooldownEnv(command: string, opts: CooldownEnvOptions): Record<string, string>;
+/**
+ * bun has no env setting: append `--minimum-release-age=<seconds>` to each
+ * `bun install/add/update` / `bunx` (bun ≥ 1.3, only when not already given).
+ */
+export declare function bunCooldownCommand(command: string, days: number, version: string | null): string;
+/**
+ * Prefix each package-manager invocation with its own cooldown variable from
+ * `env` (`npm i` → `npm_config_min_release_age=2 npm i`). Used where one
+ * long-lived shell serves every command.
+ */
+export declare function scopeCooldown(command: string, env: Record<string, string>): string;
+/** Detect versions of the managers a command mentions (cached; nothing for non-installs). */
+export declare function detectMentionedVersions(command: string, cwd?: string): Promise<Partial<Record<PackageManager, string | null>>>;
+/**
+ * One plain line explaining a failed install the cooldown caused, so the
+ * agent doesn't misread a cryptic ETARGET / "no candidates". Null otherwise.
+ */
+export declare function cooldownFailureHint(output: string, days: number): string | null;
+/** Test hook. */
+export declare function clearManagerVersionCache(): void;
+/** Cooldown env for an MCP stdio launch (`npx …`/`uvx …`); {} for anything else. */
+export declare function launchCooldownEnv(command: string, args: readonly string[], cwd: string, days?: number): Promise<Record<string, string>>;

package/dist/core/package-cooldown.js

@@ -0,0 +1,301 @@
+/**
+ * Release-age cooldown for every install the agent runs (P1). Each package
+ * manager's native setting is applied to the command, so the manager itself
+ * skips versions younger than the cooldown — transitive deps included — and
+ * falls back to an older version. Locked versions still install.
+ *
+ * Verified (temp dirs, see package-cooldown.test.ts for the shapes):
+ * - npm 11.12.1 `npm_config_min_release_age` (days), pnpm 10.17.1
+ *   `npm_config_minimum_release_age` (minutes), pip 26.1.2 `PIP_UPLOADED_PRIOR_TO`.
+ * - bun 1.3.14: env has no effect; `--minimum-release-age=<seconds>` on
+ *   `bun install/add` skips a fresh transitive dep; `--frozen-lockfile` still
+ *   installs locked fresh versions. Appended to the command (bun ≥ 1.3).
+ * - yarn berry 4.10.3 `YARN_NPM_MINIMAL_AGE_GATE` (minutes) skips a fresh
+ *   transitive dep; yarn 4.9 rejects the unknown setting, so ≥ 4.10 only.
+ *   Yarn classic has no cooldown (own age check for named packages instead).
+ * - uv 0.7.13 `UV_EXCLUDE_NEWER`: only for commands that resolve. uv records
+ *   it in uv.lock `[options]`; a later plain `uv sync` works, but a plain
+ *   `uv sync` with a *different* value re-resolves, so it is never set there.
+ */
+import { execFile } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { compareVersions } from "./threat-feed.js";
+/** First version with a native cooldown we can apply. */
+const NATIVE_SINCE = {
+    npm: "11.10.0",
+    pnpm: "10.16.0",
+    yarn: "4.10.0",
+    bun: "1.3.0",
+    pip: "26.1",
+    uv: "0.0.0",
+};
+const versionCache = new Map();
+/** How to spawn `<manager> --version`. Windows: npm/pnpm/yarn are `.cmd` shims, which need a shell. */
+export function versionSpawn(manager, platform = process.platform) {
+    // One command string (no args array) with shell: avoids Node's DEP0190 warning.
+    return platform === "win32"
+        ? { file: `${manager} --version`, args: [], shell: true }
+        : { file: manager, args: ["--version"], shell: false };
+}
+/**
+ * `<manager> --version`, once per process (yarn: once per directory, since
+ * berry is pinned per project); null when missing.
+ */
+export function managerVersion(manager, cwd) {
+    const key = manager === "yarn" ? `yarn:${cwd ?? ""}` : manager;
+    let hit = versionCache.get(key);
+    if (!hit) {
+        const { file, args, shell } = versionSpawn(manager);
+        hit = new Promise((resolve) => {
+            execFile(file, args, {
+                timeout: 3_000,
+                shell,
+                windowsHide: true,
+                cwd: manager === "yarn" && cwd ? cwd : undefined,
+                env: { ...process.env, COREPACK_ENABLE_DOWNLOAD_PROMPT: "0" },
+            }, (err, stdout) => {
+                const m = /(\d+\.\d+(?:\.\d+)?)/.exec(String(stdout));
+                resolve(err || !m ? null : (m[1] ?? null));
+            });
+        });
+        versionCache.set(key, hit);
+    }
+    return hit;
+}
+/** Whether `manager` at `version` honours the cooldown we apply. */
+export function hasNativeCooldown(manager, version) {
+    const since = NATIVE_SINCE[manager];
+    return since !== undefined && version !== null && compareVersions(version, since) >= 0;
+}
+const MENTIONS = {
+    npm: /\b(?:npm|npx)\b/,
+    pnpm: /\bpnpm\b/,
+    yarn: /\byarn\b/,
+    bun: /\bbunx?\b/,
+    pip: /\bpip3?\b/,
+    uv: /\buvx?\b/,
+};
+/** Package managers a command mentions (cheap regex, no spawn). */
+export function mentionedManagers(command) {
+    return Object.keys(MENTIONS).filter((m) => MENTIONS[m].test(command));
+}
+const INSTALL_HINT = /\b(?:(?:npm|pnpm|yarn|bun)\s+(?:i|install|add|a|ci|update|up|upgrade|dlx|exec|x|create)|npx|bunx|uvx|pip3?\s+install|pipx\s+(?:run|install)|uv\s+(?:add|lock|sync|pip|tool|run))\b|(?:^|[;&|]\s*)yarn(?:\s*$|\s*[;&|]|\s+-)/m;
+/** Cheap regex: could this command install packages? Non-installs skip every spawn and file read. */
+export function mayInstall(command) {
+    return INSTALL_HINT.test(command);
+}
+/** uv commands that resolve (and so honour UV_EXCLUDE_NEWER without breaking an existing lock). */
+const UV_RESOLVES = /\buv\s+(?:add|lock|pip\s+(?:install|compile)|tool\s+(?:run|install))\b|\buvx\b|\buv\s+sync\b[^;&|\n]*--upgrade/;
+export function uvResolves(command) {
+    return UV_RESOLVES.test(command);
+}
+function readSmall(file) {
+    try {
+        const st = fs.statSync(file);
+        return st.isFile() && st.size < 256_000 ? fs.readFileSync(file, "utf8") : "";
+    }
+    catch {
+        return "";
+    }
+}
+/**
+ * Whether installs here may come from a registry other than public npm
+ * (command `--registry`, `npm_config_registry`, a `registry=` /
+ * `@scope:registry=` line in .npmrc up the tree or in ~/.npmrc,
+ * `npmRegistryServer` in .yarnrc.yml). Cheap sync reads, install commands only.
+ */
+export function usesCustomNpmRegistry(command, cwd, env = process.env) {
+    if (/--registry[=\s]/.test(command))
+        return true;
+    const reg = env.npm_config_registry ?? env.NPM_CONFIG_REGISTRY;
+    if (reg && !/^https?:\/\/registry\.(?:npmjs\.org|yarnpkg\.com)\/?$/.test(reg))
+        return true;
+    const files = [];
+    for (let dir = path.resolve(cwd), i = 0; i < 30; i++) {
+        files.push(path.join(dir, ".npmrc"), path.join(dir, ".yarnrc.yml"));
+        const up = path.dirname(dir);
+        if (up === dir)
+            break;
+        dir = up;
+    }
+    const home = env.HOME ?? env.USERPROFILE;
+    if (home)
+        files.push(path.join(home, ".npmrc"));
+    return files.some((f) => {
+        const text = readSmall(f);
+        if (!text)
+            return false;
+        return f.endsWith(".yml")
+            ? /^\s*npmRegistryServer\s*:/m.test(text) || /^\s*npmScopes\s*:/m.test(text)
+            : /^\s*(?:@[^:\s]+:)?registry\s*=\s*(?!https?:\/\/registry\.npmjs\.org\/?\s*$)\S/m.test(text);
+    });
+}
+/** Whether pip/uv may install from an index other than PyPI (flags, env, pip.conf). */
+export function usesCustomPypiIndex(command, env = process.env) {
+    if (/(?:^|\s)(?:-i|--index-url|--extra-index-url|--index|--default-index|-f|--find-links)[=\s]/.test(command))
+        return true;
+    for (const k of [
+        "PIP_INDEX_URL",
+        "PIP_EXTRA_INDEX_URL",
+        "UV_INDEX_URL",
+        "UV_EXTRA_INDEX_URL",
+        "UV_INDEX",
+        "UV_DEFAULT_INDEX",
+    ]) {
+        if (env[k])
+            return true;
+    }
+    const home = env.HOME ?? env.USERPROFILE;
+    if (!home)
+        return false;
+    return [
+        path.join(home, ".config", "pip", "pip.conf"),
+        path.join(home, ".pip", "pip.conf"),
+        path.join(home, "AppData", "Roaming", "pip", "pip.ini"),
+    ].some((f) => /^\s*(?:extra-)?index-url\s*=/m.test(readSmall(f)));
+}
+/**
+ * Cooldown environment variables for `command`:
+ * - npm `min-release-age` (days), npm ≥ 11.10 only (older npm warns on it).
+ * - pnpm `minimum-release-age` (minutes) via npm_config_, only when the
+ *   command runs pnpm (npm warns on this key).
+ * - yarn berry ≥ 4.10 `YARN_NPM_MINIMAL_AGE_GATE` (minutes).
+ * - pip `PIP_UPLOADED_PRIOR_TO` relative ISO duration (older pip ignores it).
+ * - uv `UV_EXCLUDE_NEWER` absolute timestamp: always without `uv.lock`; with
+ *   one only for resolving commands (plain `uv sync`/`uv run` keep the lock;
+ *   the lockfile check covers those).
+ */
+export function packageCooldownEnv(command, opts) {
+    if (!(opts.days > 0))
+        return {};
+    const env = {};
+    if (hasNativeCooldown("npm", opts.versions.npm ?? null)) {
+        env.npm_config_min_release_age = String(opts.days);
+    }
+    const minutes = String(Math.round(opts.days * 1440));
+    // pnpm fails hard (ERR_PNPM_MISSING_TIME) on registries that serve no
+    // publish times, common for private ones; npm and bun just allow such versions.
+    const pnpm = MENTIONS.pnpm.test(command) && hasNativeCooldown("pnpm", opts.versions.pnpm ?? null);
+    const yarn = MENTIONS.yarn.test(command) && hasNativeCooldown("yarn", opts.versions.yarn ?? null);
+    const custom = (pnpm || yarn) && usesCustomNpmRegistry(command, opts.cwd, opts.env);
+    if (pnpm && !custom) {
+        env.npm_config_minimum_release_age = minutes;
+    }
+    if (yarn && !custom) {
+        env.YARN_NPM_MINIMAL_AGE_GATE = minutes;
+    }
+    env.PIP_UPLOADED_PRIOR_TO = `P${opts.days}D`;
+    if (MENTIONS.uv.test(command) &&
+        (uvResolves(command) || !fs.existsSync(path.join(opts.cwd, "uv.lock")))) {
+        env.UV_EXCLUDE_NEWER = new Date(opts.now - opts.days * 86_400_000)
+            .toISOString()
+            .replace(/\.\d{3}Z$/, "Z");
+    }
+    return env;
+}
+const BUN_RESOLVE = /(^|[;&|(]\s*|\n\s*)(bun\s+(?:install|i|add|a|update)|bunx|bun\s+x)(?=\s|$)/g;
+/**
+ * bun has no env setting: append `--minimum-release-age=<seconds>` to each
+ * `bun install/add/update` / `bunx` (bun ≥ 1.3, only when not already given).
+ */
+export function bunCooldownCommand(command, days, version) {
+    if (!(days > 0) || !hasNativeCooldown("bun", version))
+        return command;
+    if (command.includes("--minimum-release-age"))
+        return command;
+    const flag = ` --minimum-release-age=${Math.round(days * 86_400)}`;
+    return command.replace(BUN_RESOLVE, (_m, pre, cmd) => `${pre}${cmd}${flag}`);
+}
+/** Env prefix per program, for shells whose environment is fixed at start (persistent bash). */
+const SCOPED = [
+    [/(^|[;&|(]\s*|\n\s*)(npm|npx)\b/g, "npm_config_min_release_age"],
+    [/(^|[;&|(]\s*|\n\s*)(pnpm)\b/g, "npm_config_minimum_release_age"],
+    [/(^|[;&|(]\s*|\n\s*)(yarn)\b/g, "YARN_NPM_MINIMAL_AGE_GATE"],
+    [/(^|[;&|(]\s*|\n\s*)(uvx?)\b/g, "UV_EXCLUDE_NEWER"],
+];
+/**
+ * Prefix each package-manager invocation with its own cooldown variable from
+ * `env` (`npm i` → `npm_config_min_release_age=2 npm i`). Used where one
+ * long-lived shell serves every command.
+ */
+export function scopeCooldown(command, env) {
+    let out = command;
+    for (const [re, key] of SCOPED) {
+        const value = env[key];
+        if (value)
+            out = out.replace(re, (_m, pre, prog) => `${pre}${key}=${value} ${prog}`);
+    }
+    return out;
+}
+/** Detect versions of the managers a command mentions (cached; nothing for non-installs). */
+export async function detectMentionedVersions(command, cwd) {
+    const out = {};
+    if (!mayInstall(command))
+        return out;
+    const wanted = mentionedManagers(command).filter((m) => m === "npm" || m === "pnpm" || m === "yarn" || m === "bun");
+    await Promise.all(wanted.map(async (m) => {
+        out[m] = await managerVersion(m, cwd);
+    }));
+    return out;
+}
+/**
+ * Manager errors the cooldown causes, verified against npm 11.12, pnpm 10.17,
+ * bun 1.3.14, yarn 4.10, pip 26.1 and uv 0.7. First group = the manager names
+ * the cooldown itself; second = a generic "no such version" that the cooldown
+ * may have caused (also printed for versions that truly don't exist).
+ */
+const COOLDOWN_SURE = [
+    /No matching version found for (\S+) with a date before/, // npm
+    /No matching version found for (\S+) published by/, // pnpm
+    /"([^"]+)" found for specifier "([^"]+)" \(blocked by minimum-release-age/, // bun
+];
+const COOLDOWN_MAYBE = [
+    /YN0082: [│|]?\s*(\S+): No candidates found/, // yarn berry
+    /No matching distribution found for (\S+)/, // pip
+    /there is no version of (\S+?)(?:\s|$)/, // uv
+];
+/**
+ * One plain line explaining a failed install the cooldown caused, so the
+ * agent doesn't misread a cryptic ETARGET / "no candidates". Null otherwise.
+ */
+export function cooldownFailureHint(output, days) {
+    if (!(days > 0) || output.length === 0)
+        return null;
+    const tail = output.length > 20_000 ? output.slice(-20_000) : output;
+    for (const re of COOLDOWN_SURE) {
+        const m = re.exec(tail);
+        if (!m)
+            continue;
+        const pkg = m[2] ? `${m[1]}@${m[2]}` : (m[1] ?? "that version");
+        return `EZ Coder's ${days}-day release-age cooldown hid ${pkg}: it was published less than ${days} days ago. Pin the newest older version (or drop the version so the manager picks one); if the user needs this exact version, tell them it is held back by the cooldown (setting packageCooldownDays).`;
+    }
+    for (const re of COOLDOWN_MAYBE) {
+        const m = re.exec(tail);
+        if (!m)
+            continue;
+        return `If ${m[1] ?? "that version"} was published in the last ${days} days, EZ Coder's release-age cooldown hid it: pin the newest older version instead (if the user needs that exact version, tell them it is held back by the cooldown, setting packageCooldownDays).`;
+    }
+    return null;
+}
+/** Test hook. */
+export function clearManagerVersionCache() {
+    versionCache.clear();
+}
+/** Cooldown env for an MCP stdio launch (`npx …`/`uvx …`); {} for anything else. */
+export async function launchCooldownEnv(command, args, cwd, days = 2) {
+    const base = path
+        .basename(command)
+        .toLowerCase()
+        .replace(/\.(cmd|exe)$/, "");
+    if (!["npx", "npm", "pnpm", "uvx", "uv"].includes(base))
+        return {};
+    const line = [base, ...args].join(" ");
+    return packageCooldownEnv(line, {
+        days,
+        now: Date.now(),
+        cwd,
+        versions: await detectMentionedVersions(line, cwd),
+    });
+}
+//# sourceMappingURL=package-cooldown.js.map

package/dist/core/package-cooldown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-cooldown.js","sourceRoot":"","sources":["../../src/core/package-cooldown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAInD,yDAAyD;AACzD,MAAM,YAAY,GAA4C;IAC5D,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,EAAE,EAAE,OAAO;CACZ,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkC,CAAC;AAE/D,uGAAuG;AACvG,MAAM,UAAU,YAAY,CAC1B,OAAuB,EACvB,WAA4B,OAAO,CAAC,QAAQ;IAE5C,gFAAgF;IAChF,OAAO,QAAQ,KAAK,OAAO;QACzB,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAuB,EAAE,GAAY;IAClE,MAAM,GAAG,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,IAAI,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACpD,GAAG,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,QAAQ,CACN,IAAI,EACJ,IAAI,EACJ;gBACE,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,WAAW,EAAE,IAAI;gBACjB,GAAG,EAAE,OAAO,KAAK,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;gBAChD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,+BAA+B,EAAE,GAAG,EAAE;aAC9D,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,MAAM,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YAC7C,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,OAAuB,EAAE,OAAsB;IAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,QAAQ,GAAmC;IAC/C,GAAG,EAAE,iBAAiB;IACtB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,EAAE,EAAE,UAAU;CACf,CAAC;AAEF,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAQ,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,YAAY,GAChB,8NAA8N,CAAC;AAEjO,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,mGAAmG;AACnG,MAAM,WAAW,GACf,gHAAgH,CAAC;AAEnH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,mBAAmB,CAAC;IAC/D,IAAI,GAAG,IAAI,CAAC,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,GAAG;YAAE,MAAM;QACtB,GAAG,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC;IACzC,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvB,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5E,CAAC,CAAC,gFAAgF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,IACE,2FAA2F,CAAC,IAAI,CAC9F,OAAO,CACR;QAED,OAAO,IAAI,CAAC;IACd,KAAK,MAAM,CAAC,IAAI;QACd,eAAe;QACf,qBAAqB;QACrB,cAAc;QACd,oBAAoB;QACpB,UAAU;QACV,kBAAkB;KACnB,EAAE,CAAC;QACF,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC;KACxD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAYD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,IAAwB;IAExB,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACrD,sEAAsE;IACtE,gFAAgF;IAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,8BAA8B,GAAG,OAAO,CAAC;IAC/C,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,GAAG,CAAC,yBAAyB,GAAG,OAAO,CAAC;IAC1C,CAAC;IACD,GAAG,CAAC,qBAAqB,GAAG,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;IAC7C,IACE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QACzB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EACvE,CAAC;QACD,GAAG,CAAC,gBAAgB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;aAC/D,WAAW,EAAE;aACb,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,6EAA6E,CAAC;AAElG;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAE,OAAsB;IACtF,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,MAAM,IAAI,GAAG,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;IACnE,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,GAAW,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,gGAAgG;AAChG,MAAM,MAAM,GAA4B;IACtC,CAAC,iCAAiC,EAAE,4BAA4B,CAAC;IACjE,CAAC,8BAA8B,EAAE,gCAAgC,CAAC;IAClE,CAAC,8BAA8B,EAAE,2BAA2B,CAAC;IAC7D,CAAC,8BAA8B,EAAE,kBAAkB,CAAC;CACrD,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,GAA2B;IACxE,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,KAAK;YACP,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAW,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,GAAY;IAEZ,MAAM,GAAG,GAAmD,EAAE,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAClE,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACrB,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,aAAa,GAAa;IAC9B,wDAAwD,EAAE,MAAM;IAChE,kDAAkD,EAAE,OAAO;IAC3D,0EAA0E,EAAE,MAAM;CACnF,CAAC;AACF,MAAM,cAAc,GAAa;IAC/B,4CAA4C,EAAE,aAAa;IAC3D,0CAA0C,EAAE,MAAM;IAClD,uCAAuC,EAAE,KAAK;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,IAAY;IAC9D,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC;QAChE,OAAO,cAAc,IAAI,iCAAiC,GAAG,gCAAgC,IAAI,wMAAwM,CAAC;IAC5S,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,8BAA8B,IAAI,qMAAqM,CAAC;IAC7Q,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,wBAAwB;IACtC,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,IAAuB,EACvB,GAAW,EACX,IAAI,GAAG,CAAC;IAER,MAAM,IAAI,GAAG,IAAI;SACd,QAAQ,CAAC,OAAO,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,kBAAkB,CAAC,IAAI,EAAE;QAC9B,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;QACf,GAAG;QACH,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC;KACnD,CAAC,CAAC;AACL,CAAC"}

package/dist/core/package-threats.d.ts

@@ -1,18 +1,92 @@
 import type { ShellThreat } from "./shell-threats.js";
+import { type ThreatFeedData } from "./threat-feed.js";
+import { type PackageManager } from "./package-cooldown.js";
 export type PackageEcosystem = "npm" | "PyPI";
 export interface PackageRef {
     ecosystem: PackageEcosystem;
     name: string;
+    /** Version, range or dist-tag as written (`5.3.0`, `^5`, `next`); undefined when unpinned. */
+    spec?: string;
+    manager: PackageManager | "npx" | "uvx";
+}
+export interface LockfileInstall {
+    ecosystem: PackageEcosystem;
+    manager: PackageManager;
+    /** Lockfile path relative to the command's directory. */
+    file: string;
+    /** The command re-resolves (`uv sync --upgrade`): the locked-age check doesn't apply. */
+    resolves?: boolean;
 }
 export interface PackageCheckOptions {
     fetch?: typeof fetch;
     signal?: AbortSignal;
+    /** Directory the command runs in (lockfiles are read from here). */
+    cwd?: string;
+    /** Release-age cooldown in days (0 disables the age check). */
+    cooldownDays?: number;
+    now?: () => number;
+    feed?: ThreatFeedData;
+    /** Verdict cache dir; null = memory only. Default: the GG dir (memory only under vitest). */
+    cacheDir?: string | null;
+    /** Environment for registry settings (default process.env; tests). */
+    env?: NodeJS.ProcessEnv;
+    /** Override manager version detection (tests). */
+    managerVersion?: (manager: PackageManager) => Promise<string | null>;
 }
-/** Packages named by install commands in `command`. Local paths/URLs are skipped. */
+/** Packages named by install commands in `command`. Local paths/URLs/git are skipped. */
 export declare function parsePackageInstalls(command: string): PackageRef[];
+/** No-arg installs that install a whole lockfile. */
+export declare function parseLockfileInstalls(command: string): LockfileInstall[];
+export interface LockedPackage {
+    name: string;
+    version: string;
+}
+/** Parse name@version pairs from a lockfile's text. Unknown shapes yield []. */
+export declare function parseLockfile(file: string, raw: string): LockedPackage[];
+/**
+ * `parseLockfile` for the event loop's sake: walks lines in slices of a few
+ * ms with a yield in between, so a 50k-entry lockfile never stalls the
+ * sidecar (shared by every app window). Same results.
+ */
+export declare function parseLockfileAsync(file: string, raw: string): Promise<LockedPackage[]>;
 /** Optimal-string-alignment Damerau-Levenshtein distance. */
 export declare function damerauLevenshtein(a: string, b: string): number;
-/** Typosquat warnings (local) and known-malware blocks (OSV, fail-open). */
+/** The popular name `ref` is one edit away from, or null. Local only. */
+export declare function typosquatCandidate(ref: Pick<PackageRef, "ecosystem" | "name">): string | null;
+export interface LocalCheck {
+    refs: PackageRef[];
+    lockfiles: LockfileInstall[];
+    /** Blocks known from the local feed alone. */
+    threats: ShellThreat[];
+    typosquats: Array<{
+        ref: PackageRef;
+        popular: string;
+    }>;
+    /** Names already blocked by the local feed. */
+    flagged: Set<string>;
+    /** The feed used (loaded only when the command installs something). */
+    feed: ThreatFeedData;
+}
+/** Instant part of the check: parsing, typosquat candidates and local feed hits. */
+export declare function localPackageCheck(command: string, feedOrLoad: ThreatFeedData | (() => ThreatFeedData)): LocalCheck;
+/** Lockfile names checked for already-installed packages, with their ecosystem. */
+export declare const PROJECT_LOCKFILES: readonly LockfileInstall[];
+/**
+ * Malware check of one existing lockfile (already-installed packages): the
+ * local feed plus one batched OSV lookup, cached by content hash and re-asked
+ * at most once a day. No release-age check. Fail-open like every other check.
+ */
+export declare function checkLockfileMalware(lock: LockfileInstall, cwd: string, options?: PackageCheckOptions): Promise<ShellThreat[]>;
+/** Full check for one bash command. Returns blocks only; [] when clean or not an install. */
 export declare function checkPackageInstall(command: string, options?: PackageCheckOptions): Promise<ShellThreat[]>;
-/** Test hook: forget cached OSV answers. */
+/** One plain line for the agent, or null when nothing blocks. */
+export declare function packageBlockMessage(threats: ShellThreat[]): string | null;
+/**
+ * Check an MCP stdio launch (`npx -y pkg`, `uvx pkg`) before spawning.
+ * Returns the block line, or null to allow.
+ */
+export declare function checkMcpLaunch(command: string, args: readonly string[], options?: PackageCheckOptions): Promise<string | null>;
+/** Wait for pending verdict-cache writes (tests). */
+export declare function flushPackageVerdicts(): Promise<void>;
+/** Test hook: forget cached answers (memory only; the disk file is left alone). */
 export declare function clearPackageThreatCache(): void;