@somewhere-tech/cli 0.31.20 → 0.31.22

package/dist/index.js

@@ -28,7 +28,6 @@ import { registerCheck } from './commands/check.js';
 import { registerApi } from './commands/api.js';
 import { registerFs } from './commands/fs.js';
 import { registerMcp } from './commands/mcp.js';
-import { registerSwpx } from './commands/swpx.js';
 import { registerUpdate } from './commands/update.js';
 import { registerCall } from './commands/call.js';
 import { registerTasks } from './commands/tasks.js';
@@ -47,15 +46,14 @@ const program = new Command()
     .name('somewhere')
     .description('CLI for somewhere.tech')
     .version(pkg.version);
-const passThroughCommand = process.argv[2] === 'npx' || process.argv[2] === 'npm';
 recordLastRun(process.argv.slice(2));
-const jsonOutputRequested = !passThroughCommand && process.argv.includes('--json');
+const jsonOutputRequested = process.argv.includes('--json');
 setJsonOutputMode(jsonOutputRequested);
 // First output of every interactive command — see lib/startup-notice.ts.
 const notice = startupNotice(pkg.version, {
     isTTY: Boolean(process.stdout.isTTY),
     jsonOutput: jsonOutputRequested,
-    passThrough: passThroughCommand,
+    passThrough: false,
 });
 if (notice)
     process.stderr.write(notice + '\n');
@@ -63,10 +61,6 @@ if (jsonOutputRequested) {
     program.exitOverride();
     program.configureOutput({ writeErr: () => { } });
 }
-// Required so the npx/npm pass-through commands can forward unknown flags to the
-// wrapped tool (passThroughOptions). Only affects program-level option ordering
-// (global -V/--version/--help still work); each subcommand parses as before.
-program.enablePositionalOptions();
 registerAuth(program);
 registerInit(program);
 registerLink(program);
@@ -94,7 +88,6 @@ registerCheck(program);
 registerApi(program);
 registerFs(program);
 registerMcp(program);
-registerSwpx(program);
 registerUpdate(program);
 registerCall(program);
 registerTasks(program);
@@ -106,8 +99,8 @@ registerCron(program);
 registerEmail(program);
 // User-notification pipeline (update-available, advisories, announcements…).
 // Centrally gated to interactive, non-CI, non-pass-through commands and emitted to
-// STDERR as a parting line AFTER the command — never stdout, agent, or swpx/swpm
-// safety output. Fail-open: collectNotices swallows all errors.
+// STDERR as a parting line AFTER the command, never stdout or agent output.
+// Fail-open: collectNotices swallows all errors.
 //
 // Do NOT await this before parsing — the once-a-day cache-refresh fetch would add
 // startup latency to every command. Kick it off, parse immediately; if it resolves

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACnE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wBAAwB,CAAC;KACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;AAClF,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,mBAAmB,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnF,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;AAEvC,yEAAyE;AACzE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE;IACxC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IACpC,UAAU,EAAE,mBAAmB;IAC/B,WAAW,EAAE,kBAAkB;CAChC,CAAC,CAAC;AACH,IAAI,MAAM;IAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAChD,IAAI,mBAAmB,EAAE,CAAC;IACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IACvB,OAAO,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAChF,6EAA6E;AAC7E,OAAO,CAAC,uBAAuB,EAAE,CAAC;AAElC,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AAEvB,6EAA6E;AAC7E,mFAAmF;AACnF,iFAAiF;AACjF,gEAAgE;AAChE,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,+EAA+E;AAC/E,2DAA2D;AAC3D,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;KACzB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;IAChB,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC,CAAC;KACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnB,IAAI,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,mBAAmB,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/E,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CACnE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,wBAAwB,CAAC;KACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5D,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;AAEvC,yEAAyE;AACzE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE;IACxC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IACpC,UAAU,EAAE,mBAAmB;IAC/B,WAAW,EAAE,KAAK;CACnB,CAAC,CAAC;AACH,IAAI,MAAM;IAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAChD,IAAI,mBAAmB,EAAE,CAAC;IACxB,OAAO,CAAC,YAAY,EAAE,CAAC;IACvB,OAAO,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3B,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,eAAe,CAAC,OAAO,CAAC,CAAC;AACzB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,UAAU,CAAC,OAAO,CAAC,CAAC;AACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,cAAc,CAAC,OAAO,CAAC,CAAC;AACxB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC1B,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AACvB,WAAW,CAAC,OAAO,CAAC,CAAC;AACrB,YAAY,CAAC,OAAO,CAAC,CAAC;AACtB,aAAa,CAAC,OAAO,CAAC,CAAC;AAEvB,6EAA6E;AAC7E,mFAAmF;AACnF,4EAA4E;AAC5E,iDAAiD;AACjD,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,+EAA+E;AAC/E,2DAA2D;AAC3D,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;KACzB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;IAChB,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC,CAAC;KACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnB,IAAI,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,mBAAmB,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/E,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/lib/init-agent-guide.js

@@ -37,10 +37,10 @@ export default async function (_req, sw) {
 }
 \`\`\`
 
-Ask \`somewhere advisor "<question>"\` first for guidance. Then use
-\`somewhere docs <topic>\` for contracts or \`https://somewhere.tech/start.txt\`
-for quickstart. Without a shell: MCP \`advisor({ question })\`, then
-\`docs({ topic })\`; \`catalog\` finds tools.
+Ordinary lookups: \`somewhere docs <topic>\` or
+\`https://somewhere.tech/start.txt\`; uncertain architecture or composition:
+\`somewhere advisor "<question>"\`. Without a shell: MCP \`docs({ topic })\`,
+\`advisor({ question })\`; \`catalog\` finds tools.
 
 No account yet? \`npx @somewhere-tech/cli deploy\` publishes a temporary app and
 prints its live URL, claim URL, and expiry. On a hosted VM, after consent,

package/dist/lib/init-install.js

@@ -1,21 +1,18 @@
 import { spawn } from 'node:child_process';
-/**
- * Run the same guarded install exposed as `somewhere npm install`. Re-entering
- * the current CLI keeps init on the swpm verdict path without assuming where a
- * globally or locally installed `somewhere` binary lives.
- */
+export function initInstallSpawnSpec(platform) {
+    return {
+        command: platform === 'win32' ? 'npm.cmd' : 'npm',
+        args: ['install', '--no-audit', '--no-fund'],
+        shell: platform === 'win32',
+    };
+}
+/** Install the generated starter with the system npm executable. */
 export function runInitInstall({ cwd, quiet }) {
     return new Promise((resolve) => {
-        const child = spawn(process.execPath, [
-            ...process.execArgv,
-            process.argv[1],
-            'npm',
-            'install',
-            '--no-audit',
-            '--no-fund',
-        ], {
+        const spec = initInstallSpawnSpec(process.platform);
+        const child = spawn(spec.command, spec.args, {
             cwd,
-            shell: false,
+            shell: spec.shell,
             stdio: quiet ? 'ignore' : 'inherit',
         });
         child.once('error', () => resolve(127));
@@ -26,7 +23,7 @@ export async function installInitDependencies(options, runner = runInitInstall)
     const exitCode = await runner(options);
     if (exitCode !== 0) {
         throw new Error(`Starter files were written, but dependency installation exited ${exitCode}. ` +
-            'Run `somewhere npm install` in this directory, then try again.');
+            'Run `npm install` in this directory, then try again.');
     }
 }
 //# sourceMappingURL=init-install.js.map

package/dist/lib/init-install.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-install.js","sourceRoot":"","sources":["../../src/lib/init-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAS3C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAsB;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB;YACE,GAAG,OAAO,CAAC,QAAQ;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACf,KAAK;YACL,SAAS;YACT,YAAY;YACZ,WAAW;SACZ,EACD;YACE,GAAG;YACH,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACpC,CACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA2B,EAC3B,SAA4B,cAAc;IAE1C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,kEAAkE,QAAQ,IAAI;YAC5E,gEAAgE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"init-install.js","sourceRoot":"","sources":["../../src/lib/init-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAe3C,MAAM,UAAU,oBAAoB,CAAC,QAAyB;IAC5D,OAAO;QACL,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;QACjD,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC;QAC5C,KAAK,EAAE,QAAQ,KAAK,OAAO;KAC5B,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,EAAsB;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACpC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA2B,EAC3B,SAA4B,cAAc;IAE1C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,kEAAkE,QAAQ,IAAI;YAC5E,sDAAsD,CACzD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/notify/index.js

@@ -2,17 +2,14 @@ import { readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { updateProvider } from './providers/update.js';
-// import { advisoryProvider } from './providers/advisory.js'; // dormant — see that file
 /** Registered notice sources. Add a provider here to surface a new kind of notice;
  *  it inherits the gate + stderr emission below, so it can never reach stdout,
- *  agent/piped output, or swpx/swpm verdict grading. */
+ *  or agent/piped output. */
 const PROVIDERS = [updateProvider];
-/** `somewhere <sub>` forms that must stay silent: the verdict/safety pass-throughs
- *  (their own bins already bypass this entry, but `somewhere swpx …` reaches here)
- *  and the machine-oriented npx/npm aliases. */
-const SKIP_SUBCOMMANDS = new Set(['swpx', 'swpm', 'x', 'm', 'npx', 'npm', 'update']);
-/** Commands that own their output or run in a safety-sensitive pass-through
- * stay silent. In particular, an `update` process keeps its old in-memory
+/** Commands that manage the CLI update own their terminal output. */
+const SKIP_SUBCOMMANDS = new Set(['update']);
+/** Commands that own their output stay silent. In particular, an `update`
+ * process keeps its old in-memory
  * version after installing the new package, so its generic exit notice would
  * otherwise repeat the update that just succeeded. */
 export function subcommandSuppressesNotifications(argv) {

package/dist/lib/notify/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/notify/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,yFAAyF;AAEzF;;wDAEwD;AACxD,MAAM,SAAS,GAAqB,CAAC,cAAc,CAAC,CAAC;AAErD;;gDAEgD;AAChD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErF;;;sDAGsD;AACtD,MAAM,UAAU,iCAAiC,CAAC,IAAc;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC/E,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;+DAE+D;AAC/D,SAAS,oBAAoB,CAAC,IAAc;IAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,kCAAkC;IAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,UAAU;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAAE,OAAO,KAAK,CAAC,CAAC,iBAAiB;IAC3E,IAAI,iCAAiC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;6DAE6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,IAAI,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,oDAAoD;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/notify/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;6BAE6B;AAC7B,MAAM,SAAS,GAAqB,CAAC,cAAc,CAAC,CAAC;AAErD,qEAAqE;AACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE7C;;;sDAGsD;AACtD,MAAM,UAAU,iCAAiC,CAAC,IAAc;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAC/E,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;+DAE+D;AAC/D,SAAS,oBAAoB,CAAC,IAAc;IAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,kCAAkC;IAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,UAAU;IAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B;QAAE,OAAO,KAAK,CAAC,CAAC,iBAAiB;IAC3E,IAAI,iCAAiC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;6DAE6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,IAAI,CAAC;QACH,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,oDAAoD;IACjE,CAAC;AACH,CAAC"}

package/dist/lib/temp-auth.js

@@ -41,7 +41,7 @@ export function solvePow(nonce, difficulty) {
 }
 /** Mint a temporary, no-login developer credential: GET the PoW challenge,
  *  solve it locally, POST the solution for a bearer key. `fetchImpl` is
- *  injectable (same DI seam as src/swpx/run-common.ts) so tests never touch
+ *  injectable so tests never touch
  *  the network. Throws a clear Error — including the server's own message
  *  where available — on any failure at either step. */
 export async function mintTempAccount(fetchImpl = globalThis.fetch) {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@somewhere-tech/cli",
-  "version": "0.31.20",
+  "version": "0.31.22",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@somewhere-tech/cli",
-      "version": "0.31.20",
+      "version": "0.31.22",
       "bundleDependencies": [
         "@modelcontextprotocol/sdk",
         "chokidar",
@@ -31,9 +31,7 @@
       "bin": {
         "cli": "bin/somewhere.js",
         "somewhere": "bin/somewhere.js",
-        "sw": "bin/somewhere.js",
-        "swpm": "bin/swpm.js",
-        "swpx": "bin/swpx.js"
+        "sw": "bin/somewhere.js"
       },
       "devDependencies": {
         "@types/node": "^22.19.21",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@somewhere-tech/cli",
-  "version": "0.31.20",
+  "version": "0.31.22",
   "description": "CLI for somewhere.tech — auth, projects, deploy, pull, promote, db, logs, env, MCP bridge.",
   "keywords": [
     "somewhere",
@@ -23,9 +23,7 @@
   "bin": {
     "cli": "bin/somewhere.js",
     "somewhere": "bin/somewhere.js",
-    "sw": "bin/somewhere.js",
-    "swpx": "bin/swpx.js",
-    "swpm": "bin/swpm.js"
+    "sw": "bin/somewhere.js"
   },
   "files": [
     "LICENSE",

package/bin/swpm.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import { main } from '../dist/swpm-bin.js';
-
-main(process.argv.slice(2))
-  .then((code) => process.exit(code))
-  .catch((err) => {
-    console.error(err instanceof Error ? err.message : String(err));
-    process.exit(1);
-  });

package/bin/swpx.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import { main } from '../dist/swpx-bin.js';
-
-main(process.argv.slice(2))
-  .then((code) => process.exit(code))
-  .catch((err) => {
-    console.error(err instanceof Error ? err.message : String(err));
-    process.exit(1);
-  });

package/dist/commands/swpx.js

@@ -1,43 +0,0 @@
-/** `somewhere npx`, `somewhere npm`, and `somewhere check` — the verdict layer
- *  surfaced as subcommands of the main CLI (the same logic ships as the
- *  standalone `swpx` / `swpm` bins). npx/npm are pass-through wrappers, so they
- *  declare a variadic arg and let unknown flags flow to the target tool
- *  (passThroughOptions, enabled by program.enablePositionalOptions() in
- *  index.ts). Each action exits with the gate's own code. */
-import { runSwpx } from '../swpx/run-swpx.js';
-import { runSwpm } from '../swpx/run-swpm.js';
-import { runCheck } from '../swpx/check.js';
-export function registerSwpx(program) {
-    program
-        .command('npx [args...]')
-        .description('Run a package with npx after a verdict check (swpx). Verified passes ' +
-        'through; flagged stops with evidence; confirmed malware is blocked; if ' +
-        'the verdict service is down, falls back to plain npx.')
-        .allowUnknownOption()
-        .passThroughOptions()
-        .action(async (args = []) => {
-        const { exitCode } = await runSwpx(args);
-        process.exit(exitCode);
-    });
-    program
-        .command('npm [args...]')
-        .description('Run npm with an install-time verdict check (swpm). install/add/ci are ' +
-        'gated — confirmed malware halts the install; other npm commands pass ' +
-        'straight through.')
-        .allowUnknownOption()
-        .passThroughOptions()
-        .action(async (args = []) => {
-        const { exitCode } = await runSwpm(args);
-        process.exit(exitCode);
-    });
-    program
-        .command('check [package]')
-        .description('Check an npm package against the verdict database without running or ' +
-        'installing it. Exit code: 0 verified, 1 unverified, 2 blocked, 3 unknown.')
-        .option('--json', 'Print the raw verdict object (for agents / CI)')
-        .action(async (pkg, opts) => {
-        const code = await runCheck(pkg, { json: opts.json === true });
-        process.exit(code);
-    });
-}
-//# sourceMappingURL=swpx.js.map

package/dist/commands/swpx.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"swpx.js","sourceRoot":"","sources":["../../src/commands/swpx.ts"],"names":[],"mappings":"AAAA;;;;;6DAK6D;AAG7D,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CACV,uEAAuE;QACrE,yEAAyE;QACzE,uDAAuD,CAC1D;SACA,kBAAkB,EAAE;SACpB,kBAAkB,EAAE;SACpB,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,EAAE,EAAE;QACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CACV,wEAAwE;QACtE,uEAAuE;QACvE,mBAAmB,CACtB;SACA,kBAAkB,EAAE;SACpB,kBAAkB,EAAE;SACpB,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,EAAE,EAAE;QACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACV,uEAAuE;QACrE,2EAA2E,CAC9E;SACA,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;SAClE,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,IAAwB,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/lib/notify/providers/advisory.js

@@ -1,30 +0,0 @@
-/** DORMANT — the pipe for "a package you previously ran through swpx/swpm now has
- *  a security advisory." Not registered in ../index.ts yet; wire it when we want it.
- *
- *  How to turn it on (kept separate from the verdict path so it can never affect
- *  safety grading):
- *
- *   1. RECORD USAGE — in the swpx/swpm bins, after a run resolves, append
- *      {name, version, ts} to ~/.somewhere/used-packages.json. This write MUST be
- *      fail-open and off the critical path (a try/catch around an async write); it
- *      must never block the install or change the verdict output.
- *
- *   2. CHECK HERE — read that file, throttle (e.g. a `checkedAt` stamp, once / 6h),
- *      batch-query the verdict API for those package@versions, and return a notice
- *      if any flipped to suspicious/blocked SINCE the user used them (compare
- *      against a stored last-seen verdict so we only alert on the transition, not
- *      every run). Keep it to one line, e.g.:
- *        "⚠ A package you used (foo@1.2.3) now has an advisory. swpx check foo@1.2.3"
- *
- *   3. REGISTER — add `advisoryProvider` to PROVIDERS in ../index.ts.
- *
- *  It inherits the central gate, so it's already stderr-only, interactive-only,
- *  and silent during swpx/swpm runs — it surfaces as ambient awareness on normal
- *  `somewhere` usage, never inline with a live verdict. */
-export const advisoryProvider = {
-    id: 'pkg-advisory',
-    async getNotice() {
-        return null; // pipe laid; dormant until the steps above are built
-    },
-};
-//# sourceMappingURL=advisory.js.map

package/dist/lib/notify/providers/advisory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"advisory.js","sourceRoot":"","sources":["../../../../src/lib/notify/providers/advisory.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;2DAsB2D;AAC3D,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,EAAE,EAAE,cAAc;IAClB,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,CAAC,qDAAqD;IACpE,CAAC;CACF,CAAC"}

package/dist/swpm-bin.js

@@ -1,11 +0,0 @@
-/** Entry for the standalone `swpm` binary (and `somewhere npm`).
- *
- *  Every arg goes to runSwpm, which gates install-family subcommands and passes
- *  everything else straight through to npm. `main` is side-effect-free (deps
- *  injectable) so it's unit-tested; bin/swpm.js does the process.exit. */
-import { runSwpm } from './swpx/run-swpm.js';
-export async function main(argv, deps = {}) {
-    const { exitCode } = await runSwpm(argv, deps);
-    return exitCode;
-}
-//# sourceMappingURL=swpm-bin.js.map

package/dist/swpm-bin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"swpm-bin.js","sourceRoot":"","sources":["../src/swpm-bin.ts"],"names":[],"mappings":"AAAA;;;;0EAI0E;AAE1E,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAG7C,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,OAAgB,EAAE;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/swpx/check.js

@@ -1,80 +0,0 @@
-/** `somewhere check <pkg>[@version] [--json]` (also `swpx check …`) — inspect a
- *  package WITHOUT running or installing anything. Prints the same verdict block
- *  as swpx, or the stable `--json` projection for agents.
- *
- *  Exit code is a severity ladder so it composes in CI / agent loops:
- *    0 verified · 1 unverified/suspicious · 2 blocked · 3 couldn't determine
- *  (unresolvable name or verdict service unreachable). Output is the command's
- *  product, so it goes to STDOUT (errors/unavailability to stderr). */
-import { parseSpec } from './registry.js';
-import { renderSingle, toJsonVerdict } from './render.js';
-import { bindDeps, msg } from './run-common.js';
-import { VerdictUnavailable } from './verdict-client.js';
-import { dim, yellow } from '../lib/output.js';
-function exitForLevel(level) {
-    if (level === 'verified')
-        return 0;
-    if (level === 'blocked')
-        return 2;
-    return 1; // unverified | suspicious
-}
-export async function runCheck(specArg, opts = {}, deps = {}) {
-    const d = bindDeps(deps);
-    if (!specArg) {
-        if (opts.json) {
-            d.log(JSON.stringify({ ok: false, error: 'PACKAGE_REQUIRED', message: 'A package name is required.' }, null, 2));
-            return 3;
-        }
-        d.errLog('Usage: somewhere check <package>[@version] [--json]');
-        return 3;
-    }
-    const spec = parseSpec(specArg);
-    let version;
-    try {
-        version = await d.resolveVersion(spec.name, spec.version);
-    }
-    catch (err) {
-        if (opts.json) {
-            d.log(JSON.stringify({
-                ok: false,
-                error: 'PACKAGE_RESOLUTION_FAILED',
-                message: `Could not resolve ${spec.name}: ${msg(err)}`,
-            }, null, 2));
-            return 3;
-        }
-        d.errLog(`Could not resolve ${spec.name}: ${msg(err)}`);
-        return 3;
-    }
-    let verdict;
-    try {
-        verdict = await d.getVerdict(spec.name, version);
-    }
-    catch (err) {
-        const rl = err instanceof VerdictUnavailable && err.rateLimited;
-        if (opts.json) {
-            d.log(JSON.stringify({
-                ok: false,
-                error: rl ? 'RATE_LIMITED' : 'VERDICT_UNAVAILABLE',
-                message: rl
-                    ? `Rate limited while checking ${spec.name}. Wait a moment and retry.`
-                    : `Could not verify ${spec.name}@${version}: ${msg(err)}`,
-            }, null, 2));
-            return 3;
-        }
-        d.errLog(rl
-            ? `${yellow('⚠')} Rate limited — couldn't check ${spec.name}. Wait a moment and retry.`
-            : `${yellow('⚠')} Could not verify ${spec.name}@${version} — the verdict service was unreachable.`);
-        if (!rl)
-            d.errLog(`  ${dim(`Reason: ${err instanceof Error ? err.message : String(err)}`)}`);
-        return 3;
-    }
-    if (opts.json) {
-        d.log(JSON.stringify(toJsonVerdict(verdict), null, 2));
-    }
-    else {
-        for (const l of renderSingle(verdict))
-            d.log(l);
-    }
-    return exitForLevel(verdict.verdict);
-}
-//# sourceMappingURL=check.js.map

package/dist/swpx/check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/swpx/check.ts"],"names":[],"mappings":"AAAA;;;;;;;uEAOuE;AAEvE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAgB,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,SAAS,YAAY,CAAC,KAAmB;IACvC,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,CAAC,0BAA0B;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAA2B,EAC3B,OAA2B,EAAE,EAC7B,OAAgB,EAAE;IAElB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACjH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,qDAAqD,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEhC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2BAA2B;gBAClC,OAAO,EAAE,qBAAqB,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC,EAAE;aACvD,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,GAAG,YAAY,kBAAkB,IAAI,GAAG,CAAC,WAAW,CAAC;QAChE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB;gBAClD,OAAO,EAAE,EAAE;oBACT,CAAC,CAAC,+BAA+B,IAAI,CAAC,IAAI,4BAA4B;oBACtE,CAAC,CAAC,oBAAoB,IAAI,CAAC,IAAI,IAAI,OAAO,KAAK,GAAG,CAAC,GAAG,CAAC,EAAE;aAC5D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,CAAC,CAAC;QACX,CAAC;QACD,CAAC,CAAC,MAAM,CACN,EAAE;YACA,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,4BAA4B;YACvF,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,IAAI,IAAI,OAAO,yCAAyC,CACrG,CAAC;QACF,IAAI,CAAC,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}

package/dist/swpx/enforce.js

@@ -1,57 +0,0 @@
-/** Fail-open policy for swpx / swpm.
- *
- *  Default is fail-OPEN (the verdict service being down must never break a
- *  build) — but never SILENTLY: when we can't verify, we print a loud warning so
- *  the developer always knows the check didn't run (a blocked check can be an
- *  attacker hiding malware, not just an outage). `enforce` flips it to
- *  fail-CLOSED for CI / security-conscious users. Precedence:
- *    --enforce / --no-enforce  >  SWPX_ENFORCE env  >  config.enforce  >  false */
-import { loadConfig } from '../lib/config.js';
-import { red, yellow, dim } from '../lib/output.js';
-const OWN_FLAGS = new Set(['--enforce', '--no-enforce']);
-/** Strip our own flags so they're never forwarded to npx/npm. */
-export function stripEnforceFlags(args) {
-    return args.filter((a) => !OWN_FLAGS.has(a));
-}
-export function resolveEnforce(args) {
-    if (args.includes('--no-enforce'))
-        return false;
-    if (args.includes('--enforce'))
-        return true;
-    const env = process.env.SWPX_ENFORCE;
-    if (env === '1' || env === 'true')
-        return true;
-    if (env === '0' || env === 'false')
-        return false;
-    try {
-        return loadConfig()?.enforce === true;
-    }
-    catch {
-        return false;
-    }
-}
-/** The LOUD "couldn't verify" block — printed to stderr, never silent. `cause` is
- *  the underlying reason (timeout / HTTP status / network error / bad body); we
- *  surface it so a timeout is distinguishable from an outage or a tamper — the
- *  thing this banner claims to care about must itself be debuggable. */
-export function loudUnavailable(emit, pkg, rateLimited, cause) {
-    emit('');
-    if (rateLimited) {
-        emit(`${yellow('⚠')} Rate limited checking ${pkg} — the verdict service is throttling.`);
-        emit(`  ${dim('Wait a moment and retry.')}`);
-    }
-    else {
-        emit(`${red('⚠')}  COULD NOT VERIFY ${pkg} — the verdict service was unreachable.`);
-        emit(`   ${dim('Running UNCHECKED (like plain npx/npm). Usually an outage — but a blocked')}`);
-        emit(`   ${dim("check can also be malware hiding. If you didn't expect this, stop and retry.")}`);
-        if (cause)
-            emit(`   ${dim(`Reason: ${cause}`)}`);
-    }
-    emit('');
-}
-/** Message when refusing to proceed under enforce (fail-closed). */
-export function refused(emit, pkg, tool) {
-    emit(`${red('✖')} Refusing: could not verify ${pkg} and enforce is on.`);
-    emit(`  ${dim(`Run real \`${tool}\` yourself to override, or set --no-enforce.`)}`);
-}
-//# sourceMappingURL=enforce.js.map

package/dist/swpx/enforce.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforce.js","sourceRoot":"","sources":["../../src/swpx/enforce.ts"],"names":[],"mappings":"AAAA;;;;;;;mFAOmF;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzD,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,UAAU,EAAE,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,eAAe,CAC7B,IAAyB,EACzB,GAAW,EACX,WAAoB,EACpB,KAAc;IAEd,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,0BAA0B,GAAG,uCAAuC,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,GAAG,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,sBAAsB,GAAG,yCAAyC,CAAC,CAAC;QACpF,IAAI,CAAC,MAAM,GAAG,CAAC,2EAA2E,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,GAAG,CAAC,8EAA8E,CAAC,EAAE,CAAC,CAAC;QAClG,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,OAAO,CAAC,IAAyB,EAAE,GAAW,EAAE,IAAmB;IACjF,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,+BAA+B,GAAG,qBAAqB,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,GAAG,CAAC,cAAc,IAAI,+CAA+C,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/dist/swpx/registry.js

@@ -1,68 +0,0 @@
-/** npm registry resolution for swpx / swpm.
- *
- *  We never download tarballs — npm's CDN does that (the whole point of the
- *  notary architecture). We only resolve a user-typed spec (`foo`, `foo@1.2.3`,
- *  `foo@^1`, `@scope/name@next`) to ONE concrete version so we can ask the
- *  verdict API about it. Resolution uses the abbreviated packument
- *  (application/vnd.npm.install-v1+json) and semver — npm's own resolver — so a
- *  range picks the same version npm would install.
- *
- *  All network goes through an injectable `FetchLike` so the pure parsing and
- *  version-selection logic is unit-tested without hitting the registry. */
-import semver from 'semver';
-const REGISTRY = process.env.SWPX_REGISTRY?.replace(/\/$/, '') || 'https://registry.npmjs.org';
-const defaultFetch = (url, init) => fetch(url, init);
-/** Split a CLI spec into name + optional version/range/tag, handling scoped
- *  packages. `@scope/name@1.2.3` → { name: '@scope/name', version: '1.2.3' }. */
-export function parseSpec(arg) {
-    const split = (at) => {
-        const version = arg.slice(at + 1);
-        return version ? { name: arg.slice(0, at), version } : { name: arg.slice(0, at) };
-    };
-    if (arg.startsWith('@')) {
-        const slash = arg.indexOf('/');
-        if (slash === -1)
-            return { name: arg }; // malformed scope — pass through
-        const at = arg.indexOf('@', slash + 1);
-        return at === -1 ? { name: arg } : split(at);
-    }
-    const at = arg.indexOf('@');
-    return at <= 0 ? { name: arg } : split(at);
-}
-/** Registry path segment for a package name (scoped slash → %2f, @ kept). */
-function registryName(name) {
-    return name.startsWith('@') ? name.replace('/', '%2f') : name;
-}
-export async function fetchPackument(name, fetchImpl = defaultFetch) {
-    const res = await fetchImpl(`${REGISTRY}/${registryName(name)}`, {
-        headers: { Accept: 'application/vnd.npm.install-v1+json' },
-    });
-    if (!res.ok)
-        throw new Error(`npm registry returned ${res.status} for ${name}`);
-    return (await res.json());
-}
-/** Resolve a spec's version field to a single concrete version.
- *  - exact valid version → returned as-is (no network).
- *  - undefined → the `latest` dist-tag.
- *  - a dist-tag (next, beta…) → that tag's version.
- *  - a range (^1, ~2.3, >=1 <2) → the greatest published version that satisfies. */
-export async function resolveVersion(name, version, fetchImpl = defaultFetch) {
-    if (version && semver.valid(version))
-        return version;
-    const pack = await fetchPackument(name, fetchImpl);
-    const tags = pack['dist-tags'] ?? {};
-    const versions = Object.keys(pack.versions ?? {});
-    if (!version) {
-        const latest = tags.latest ?? semver.maxSatisfying(versions, '*', { includePrerelease: false });
-        if (!latest)
-            throw new Error(`no published versions for ${name}`);
-        return latest;
-    }
-    if (tags[version])
-        return tags[version];
-    const match = semver.maxSatisfying(versions, version, { includePrerelease: false });
-    if (match)
-        return match;
-    throw new Error(`no version of ${name} satisfies "${version}"`);
-}
-//# sourceMappingURL=registry.js.map

package/dist/swpx/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/swpx/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;2EAU2E;AAE3E,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,4BAA4B,CAAC;AAmB/F,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAC5C,KAAK,CAAC,GAAG,EAAE,IAAmB,CAAsC,CAAC;AAOvE;iFACiF;AACjF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAW,EAAE;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC;IACF,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;QACzE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,YAAuB,YAAY;IACpF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE;QAC/D,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE;KAC3D,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;AACzC,CAAC;AAED;;;;oFAIoF;AACpF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,OAA2B,EAC3B,YAAuB,YAAY;IAEnC,IAAI,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAErD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,eAAe,OAAO,GAAG,CAAC,CAAC;AAClE,CAAC"}