@zenalexa/unicli 0.218.1 → 0.220.0

package/dist/adapters/osv/security.js

@@ -0,0 +1,247 @@
+/**
+ * @owner   src/adapters/osv/security.ts
+ * @does    Register agent-facing OSV.dev package query and vulnerability detail commands.
+ * @needs   Public OSV.dev API, TypeScript adapter loader, bounded argument parsing.
+ * @feeds   surface coverage ledger, vulnerability intelligence command surface, agent-readable OSV rows.
+ * @breaks  OSV API envelope drift, weak ecosystem/id validation, or silent empty rows hide vulnerability lookup failures.
+ */
+import { cli, Strategy } from "../../registry.js";
+const OSV_BASE = "https://api.osv.dev";
+const VULN_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/;
+const OSV_ECOSYSTEMS = new Set([
+    "npm",
+    "PyPI",
+    "Go",
+    "Maven",
+    "NuGet",
+    "RubyGems",
+    "crates.io",
+    "Packagist",
+    "Pub",
+    "Hex",
+    "Hackage",
+    "CRAN",
+    "Bitnami",
+    "GitHub Actions",
+    "SwiftURL",
+]);
+function stringField(value) {
+    return typeof value === "string" ? value : "";
+}
+function trimDate(value) {
+    const text = stringField(value).trim();
+    if (!text)
+        return null;
+    const noFraction = text.replace(/\.\d+/, "");
+    return noFraction.endsWith("Z")
+        ? noFraction
+        : text.length >= 10
+            ? text.slice(0, 10)
+            : null;
+}
+export function requireOsvString(value, label) {
+    const text = String(value ?? "").trim();
+    if (!text)
+        throw new Error(`osv ${label} cannot be empty.`);
+    return text;
+}
+export function requireOsvVulnerabilityId(value) {
+    const id = String(value ?? "").trim();
+    if (!id)
+        throw new Error("osv vulnerability id is required.");
+    if (!VULN_ID_RE.test(id)) {
+        throw new Error(`osv vulnerability id "${String(value)}" is not valid.`);
+    }
+    return id;
+}
+export function requireOsvEcosystem(value) {
+    const ecosystem = String(value ?? "").trim();
+    if (!ecosystem)
+        throw new Error("osv ecosystem is required.");
+    if (!OSV_ECOSYSTEMS.has(ecosystem)) {
+        throw new Error(`osv ecosystem "${String(value)}" is not recognised.`);
+    }
+    return ecosystem;
+}
+export function requireOsvLimit(value, fallback = 30) {
+    if (value === undefined || value === null || value === "")
+        return fallback;
+    const n = Number(value);
+    if (!Number.isInteger(n) || n < 1 || n > 200) {
+        throw new Error(`osv limit must be an integer in [1, 200]. Got: ${String(value)}`);
+    }
+    return n;
+}
+function severityLabel(vuln) {
+    const dbSeverity = vuln.database_specific?.severity;
+    if (typeof dbSeverity === "string" && dbSeverity.trim())
+        return dbSeverity.trim();
+    for (const entry of Array.isArray(vuln.severity) ? vuln.severity : []) {
+        const score = stringField(entry.score).trim();
+        if (score)
+            return score;
+    }
+    return null;
+}
+function aliases(vuln) {
+    return Array.isArray(vuln.aliases)
+        ? vuln.aliases.map(stringField).filter(Boolean).join(", ")
+        : "";
+}
+function affectedPackages(vuln) {
+    return (Array.isArray(vuln.affected) ? vuln.affected : [])
+        .map((item) => {
+        const ecosystem = stringField(item.package?.ecosystem);
+        const name = stringField(item.package?.name);
+        return ecosystem && name ? `${ecosystem}:${name}` : "";
+    })
+        .filter(Boolean)
+        .join(", ");
+}
+export function mapOsvQueryRows(vulns, limit) {
+    const sorted = vulns
+        .slice()
+        .sort((a, b) => stringField(b.published).localeCompare(stringField(a.published)))
+        .slice(0, limit);
+    return sorted.map((vuln, index) => ({
+        rank: index + 1,
+        id: stringField(vuln.id),
+        summary: stringField(vuln.summary).trim(),
+        severity: severityLabel(vuln),
+        aliases: aliases(vuln),
+        published: trimDate(vuln.published),
+        modified: trimDate(vuln.modified),
+        affectedPackages: affectedPackages(vuln),
+        url: vuln.id ? `https://osv.dev/vulnerability/${String(vuln.id)}` : "",
+    }));
+}
+export function mapOsvVulnerabilityRow(vuln) {
+    if (!vuln.id)
+        throw new Error("OSV.dev returned no vulnerability record.");
+    const cwes = Array.isArray(vuln.database_specific?.cwe_ids)
+        ? vuln.database_specific.cwe_ids.map(stringField).filter(Boolean).join(", ")
+        : "";
+    return {
+        id: stringField(vuln.id),
+        summary: stringField(vuln.summary).trim(),
+        severity: severityLabel(vuln),
+        aliases: aliases(vuln),
+        published: trimDate(vuln.published),
+        modified: trimDate(vuln.modified),
+        affectedPackages: affectedPackages(vuln),
+        cwes,
+        referenceCount: Array.isArray(vuln.references) ? vuln.references.length : 0,
+        url: `https://osv.dev/vulnerability/${String(vuln.id)}`,
+    };
+}
+async function fetchOsvJson(url, label, body) {
+    const response = await fetch(url, {
+        method: body === undefined ? "GET" : "POST",
+        headers: {
+            "User-Agent": "unicli (https://github.com/olo-dot-io/Uni-CLI)",
+            Accept: "application/json",
+            ...(body === undefined ? {} : { "Content-Type": "application/json" }),
+        },
+        body: body === undefined ? undefined : JSON.stringify(body),
+    });
+    if (response.status === 404)
+        throw new Error(`${label} returned no result.`);
+    if (response.status === 429)
+        throw new Error(`${label} returned HTTP 429.`);
+    if (!response.ok)
+        throw new Error(`${label} returned HTTP ${response.status}.`);
+    return response.json();
+}
+cli({
+    site: "osv",
+    name: "query",
+    description: "OSV.dev vulnerabilities affecting a package",
+    domain: "osv.dev",
+    strategy: Strategy.PUBLIC,
+    args: [
+        {
+            name: "package",
+            type: "str",
+            required: true,
+            positional: true,
+            description: "Package name",
+        },
+        {
+            name: "ecosystem",
+            type: "str",
+            required: true,
+            description: "OSV ecosystem",
+        },
+        {
+            name: "version",
+            type: "str",
+            description: "Specific package version",
+        },
+        {
+            name: "limit",
+            type: "int",
+            default: 30,
+            description: "Max rows",
+        },
+    ],
+    columns: [
+        "rank",
+        "id",
+        "summary",
+        "severity",
+        "aliases",
+        "published",
+        "modified",
+        "affectedPackages",
+        "url",
+    ],
+    func: async (_page, kwargs) => {
+        const name = requireOsvString(kwargs.package, "package");
+        const ecosystem = requireOsvEcosystem(kwargs.ecosystem);
+        const limit = requireOsvLimit(kwargs.limit);
+        const payload = { package: { name, ecosystem } };
+        const version = String(kwargs.version ?? "").trim();
+        if (version)
+            payload.version = version;
+        const body = (await fetchOsvJson(`${OSV_BASE}/v1/query`, `osv query ${ecosystem}:${name}`, payload));
+        const vulns = Array.isArray(body.vulns) ? body.vulns : [];
+        if (vulns.length === 0) {
+            throw new Error(`OSV.dev returned no vulnerabilities for ${ecosystem}:${name}.`);
+        }
+        return mapOsvQueryRows(vulns, limit);
+    },
+});
+cli({
+    site: "osv",
+    name: "vulnerability",
+    description: "Single OSV.dev vulnerability detail",
+    domain: "osv.dev",
+    strategy: Strategy.PUBLIC,
+    args: [
+        {
+            name: "id",
+            type: "str",
+            required: true,
+            positional: true,
+            description: "OSV vulnerability id",
+        },
+    ],
+    columns: [
+        "id",
+        "summary",
+        "severity",
+        "aliases",
+        "published",
+        "modified",
+        "affectedPackages",
+        "cwes",
+        "referenceCount",
+        "url",
+    ],
+    func: async (_page, kwargs) => {
+        const id = requireOsvVulnerabilityId(kwargs.id);
+        const vuln = (await fetchOsvJson(`${OSV_BASE}/v1/vulns/${encodeURIComponent(id)}`, `osv vulnerability ${id}`));
+        return [mapOsvVulnerabilityRow(vuln)];
+    },
+});
+//# sourceMappingURL=security.js.map

package/dist/adapters/osv/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/adapters/osv/security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,UAAU,GAAG,mCAAmC,CAAC;AACvD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK;IACL,MAAM;IACN,IAAI;IACJ,OAAO;IACP,OAAO;IACP,UAAU;IACV,WAAW;IACX,WAAW;IACX,KAAK;IACL,KAAK;IACL,SAAS;IACT,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,UAAU;CACX,CAAC,CAAC;AAwBH,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;YACjB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACnB,CAAC,CAAC,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,KAAK,mBAAmB,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9D,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE;IAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3E,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,kDAAkD,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,IAAsB;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC;IACpD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE;QACrD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,IAAsB;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB;IAC9C,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,KAAa;IAEb,MAAM,MAAM,GAAG,KAAK;SACjB,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CACjE;SACA,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,GAAG,CAAC;QACf,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACxC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;KACvE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAsB;IAEtB,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5E,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;QACzC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACxC,IAAI;QACJ,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,EAAE,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,KAAa,EACb,IAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;QAC3C,OAAO,EAAE;YACP,YAAY,EAAE,gDAAgD;YAC9D,MAAM,EAAE,kBAAkB;YAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;SACtE;QACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC5D,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,GAAG,CAAC;IACF,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,6CAA6C;IAC1D,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;IACzB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,cAAc;SAC5B;QACD;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,eAAe;SAC7B;QACD;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,0BAA0B;SACxC;QACD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,UAAU;SACxB;KACF;IACD,OAAO,EAAE;QACP,MAAM;QACN,IAAI;QACJ,SAAS;QACT,UAAU;QACV,SAAS;QACT,WAAW;QACX,UAAU;QACV,kBAAkB;QAClB,KAAK;KACN;IACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,OAAO,GAA4B,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAC9B,GAAG,QAAQ,WAAW,EACtB,aAAa,SAAS,IAAI,IAAI,EAAE,EAChC,OAAO,CACR,CAEA,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,IAAI,IAAI,GAAG,CAChE,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;CACF,CAAC,CAAC;AAEH,GAAG,CAAC;IACF,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,qCAAqC;IAClD,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM;IACzB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,sBAAsB;SACpC;KACF;IACD,OAAO,EAAE;QACP,IAAI;QACJ,SAAS;QACT,UAAU;QACV,SAAS;QACT,WAAW;QACX,UAAU;QACV,kBAAkB;QAClB,MAAM;QACN,gBAAgB;QAChB,KAAK;KACN;IACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAC9B,GAAG,QAAQ,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAChD,qBAAqB,EAAE,EAAE,CAC1B,CAAqB,CAAC;QACvB,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;CACF,CAAC,CAAC"}

package/dist/adapters/packagist/package.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @owner   src/adapters/packagist/package.ts
+ * @does    Register agent-facing Packagist single-package metadata command.
+ * @needs   packagist.org package JSON API and stable-version selection.
+ * @feeds   surface coverage ledger, PHP dependency inspection, registry command surface.
+ * @breaks  Packagist envelope drift or unstable version picking hides Composer package state.
+ */
+interface PackagistPackage {
+    name?: unknown;
+    description?: unknown;
+    repository?: unknown;
+    github_stars?: unknown;
+    favers?: unknown;
+    downloads?: {
+        total?: unknown;
+        monthly?: unknown;
+        daily?: unknown;
+    };
+    versions?: Record<string, {
+        time?: unknown;
+        license?: unknown;
+    }>;
+}
+interface PackagistBody {
+    package?: PackagistPackage;
+}
+export declare function requirePackagistName(value: unknown): string;
+export declare function pickStableVersion(versions: PackagistPackage["versions"]): string;
+export declare function mapPackagistPackageRow(body: PackagistBody, requested: string): Record<string, unknown>;
+export {};
+//# sourceMappingURL=package.d.ts.map

package/dist/adapters/packagist/package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../../src/adapters/packagist/package.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,UAAU,gBAAgB;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE;QACV,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAClE;AAED,UAAU,aAAa;IACrB,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAUD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQ3D;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,GACrC,MAAM,CAYR;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA0BzB"}

package/dist/adapters/packagist/package.js

@@ -0,0 +1,108 @@
+/**
+ * @owner   src/adapters/packagist/package.ts
+ * @does    Register agent-facing Packagist single-package metadata command.
+ * @needs   packagist.org package JSON API and stable-version selection.
+ * @feeds   surface coverage ledger, PHP dependency inspection, registry command surface.
+ * @breaks  Packagist envelope drift or unstable version picking hides Composer package state.
+ */
+import { cli, Strategy } from "../../registry.js";
+const PACKAGIST_BASE = "https://packagist.org";
+function stringField(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+function numberField(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+export function requirePackagistName(value) {
+    const name = String(value ?? "")
+        .trim()
+        .toLowerCase();
+    if (!/^[a-z0-9_.-]+\/[a-z0-9_.-]+$/.test(name)) {
+        throw new Error('packagist package name must be "<vendor>/<package>".');
+    }
+    return name;
+}
+export function pickStableVersion(versions) {
+    const keys = Object.keys(versions ?? {});
+    return (keys.find((version) => /^v?\d+\.\d+\.\d+(?:\+\S+)?$/.test(version) &&
+        !/dev|alpha|beta|rc/i.test(version)) ??
+        keys.find((version) => !/dev|alpha|beta|rc/i.test(version)) ??
+        keys[0] ??
+        "");
+}
+export function mapPackagistPackageRow(body, requested) {
+    const pkg = body.package;
+    if (!pkg || typeof pkg !== "object") {
+        throw new Error(`Packagist returned no package metadata for ${requested}.`);
+    }
+    const version = pickStableVersion(pkg.versions);
+    const entry = version ? pkg.versions?.[version] : undefined;
+    const license = Array.isArray(entry?.license)
+        ? entry.license.map(stringField).filter(Boolean).join(", ")
+        : "";
+    const downloads = pkg.downloads ?? {};
+    const name = stringField(pkg.name) || requested;
+    return {
+        package: name,
+        version,
+        releasedAt: stringField(entry?.time).slice(0, 10),
+        license,
+        description: stringField(pkg.description),
+        repository: stringField(pkg.repository),
+        githubStars: numberField(pkg.github_stars),
+        favers: numberField(pkg.favers),
+        downloads: numberField(downloads.total),
+        monthlyDownloads: numberField(downloads.monthly),
+        dailyDownloads: numberField(downloads.daily),
+        url: `${PACKAGIST_BASE}/packages/${name}`,
+    };
+}
+async function fetchPackagistJson(name) {
+    const response = await fetch(`${PACKAGIST_BASE}/packages/${name}.json`, {
+        headers: {
+            "User-Agent": "unicli (https://github.com/olo-dot-io/Uni-CLI)",
+            Accept: "application/json",
+        },
+    });
+    if (response.status === 404)
+        throw new Error(`packagist package ${name} returned no result.`);
+    if (!response.ok)
+        throw new Error(`packagist package ${name} returned HTTP ${response.status}.`);
+    return response.json();
+}
+cli({
+    site: "packagist",
+    name: "package",
+    description: "Fetch Packagist package metadata",
+    domain: "packagist.org",
+    strategy: Strategy.PUBLIC,
+    args: [
+        {
+            name: "name",
+            type: "str",
+            required: true,
+            positional: true,
+            description: 'Composer package "<vendor>/<package>"',
+        },
+    ],
+    columns: [
+        "package",
+        "version",
+        "releasedAt",
+        "license",
+        "description",
+        "repository",
+        "githubStars",
+        "favers",
+        "downloads",
+        "monthlyDownloads",
+        "dailyDownloads",
+        "url",
+    ],
+    func: async (_page, kwargs) => {
+        const name = requirePackagistName(kwargs.name);
+        const body = (await fetchPackagistJson(name));
+        return [mapPackagistPackageRow(body, name)];
+    },
+});
+//# sourceMappingURL=package.js.map

package/dist/adapters/packagist/package.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.js","sourceRoot":"","sources":["../../../src/adapters/packagist/package.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAoB/C,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SAC7B,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IACjB,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAsC;IAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,CACL,IAAI,CAAC,IAAI,CACP,CAAC,OAAO,EAAE,EAAE,CACV,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CACtC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,CAAC;QACP,EAAE,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAmB,EACnB,SAAiB;IAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO;QACP,UAAU,EAAE,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACjD,OAAO;QACP,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QACvC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC;QAC1C,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;QACvC,gBAAgB,EAAE,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC;QAChD,cAAc,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC;QAC5C,GAAG,EAAE,GAAG,cAAc,aAAa,IAAI,EAAE;KAC1C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,cAAc,aAAa,IAAI,OAAO,EAAE;QACtE,OAAO,EAAE;YACP,YAAY,EAAE,gDAAgD;YAC9D,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,sBAAsB,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,kBAAkB,QAAQ,CAAC,MAAM,GAAG,CAC9D,CAAC;IACJ,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,GAAG,CAAC;IACF,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,kCAAkC;IAC/C,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;IACzB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,uCAAuC;SACrD;KACF;IACD,OAAO,EAAE;QACP,SAAS;QACT,SAAS;QACT,YAAY;QACZ,SAAS;QACT,aAAa;QACb,YAAY;QACZ,aAAa;QACb,QAAQ;QACR,WAAW;QACX,kBAAkB;QAClB,gBAAgB;QAChB,KAAK;KACN;IACD,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAkB,CAAC;QAC/D,OAAO,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;CACF,CAAC,CAAC"}

package/dist/adapters/pubmed/articles.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @owner   src/adapters/pubmed/articles.ts
+ * @does    Register agent-facing PubMed search, article, author, citation, and related-article commands.
+ * @needs   NCBI E-utilities API, TypeScript adapter loader, PMID/query validation.
+ * @feeds   surface coverage ledger, biomedical literature command surface, agent-readable PubMed rows.
+ * @breaks  NCBI E-utilities envelope drift, weak PMID validation, or silent empty rows hide literature lookup failures.
+ */
+interface PubMedSummary {
+    uid?: unknown;
+    title?: unknown;
+    authors?: Array<{
+        name?: unknown;
+        collectivename?: unknown;
+        lastname?: unknown;
+        initials?: unknown;
+    }>;
+    source?: unknown;
+    pubdate?: unknown;
+    pubtype?: unknown[];
+    articleids?: Array<{
+        idtype?: unknown;
+        value?: unknown;
+    }>;
+}
+export declare function requirePubMedText(value: unknown, label: string): string;
+export declare function requirePmid(value: unknown, label?: string): string;
+export declare function requirePubMedLimit(value: unknown, fallback?: number, max?: number): number;
+export declare function mapPubMedSummaryRows(summaries: PubMedSummary[], pmids: string[]): Array<Record<string, unknown>>;
+export declare function mapPubMedArticleRows(xml: string, pmid: string, fullAbstract?: boolean): Array<Record<string, unknown>>;
+export {};
+//# sourceMappingURL=articles.d.ts.map

package/dist/adapters/pubmed/articles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"articles.d.ts","sourceRoot":"","sources":["../../../src/adapters/pubmed/articles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,UAAU,aAAa;IACrB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,CAAC,CAAC;CACJ;AAkBD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAIvE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAS,GAAG,MAAM,CAKlE;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,QAAQ,SAAK,EACb,GAAG,SAAM,GACR,MAAM,CASR;AAwFD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,aAAa,EAAE,EAC1B,KAAK,EAAE,MAAM,EAAE,GACd,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBhC;AAoBD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,YAAY,UAAQ,GACnB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAmDhC"}