cli-jaw 2.17.65 → 2.17.66

package/dist/scripts/check-deps-audit.js

@@ -17,18 +17,14 @@
 import { execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
-const SEVERITY_ORDER = ['info', 'low', 'moderate', 'high', 'critical'];
+import { classifyAudit } from './deps-audit-classify.js';
 const FAIL_AT = process.env['DEPS_AUDIT_LEVEL'] ?? 'low';
-function atLeast(sev, floor) {
-    return SEVERITY_ORDER.indexOf(sev) >= SEVERITY_ORDER.indexOf(floor);
-}
 const allowPath = path.resolve('scripts/audit-allowlist.json');
 if (!fs.existsSync(allowPath)) {
     console.error('[deps] scripts/audit-allowlist.json not found');
     process.exit(2);
 }
 const allowlist = JSON.parse(fs.readFileSync(allowPath, 'utf8'));
-const allowed = new Map(allowlist.allow.map(e => [e.package, e]));
 let raw;
 try {
     // npm audit exits non-zero when it finds anything, so the throw carries the
@@ -52,26 +48,7 @@ catch {
     process.exit(0);
 }
 const today = new Date().toISOString().slice(0, 10);
-const unexpected = [];
-const stale = [];
-let allowedCount = 0;
-for (const [name, v] of Object.entries(vulns)) {
-    if (!atLeast(v.severity, FAIL_AT))
-        continue;
-    const entry = allowed.get(name);
-    if (!entry) {
-        const via = (v.via ?? [])
-            .map(x => (typeof x === 'string' ? x : x.title ?? ''))
-            .filter(Boolean)
-            .slice(0, 2)
-            .join('; ');
-        unexpected.push(`${v.severity.toUpperCase()} ${name}${via ? ` — ${via}` : ''}`);
-        continue;
-    }
-    allowedCount++;
-    if (entry.review < today)
-        stale.push(`${name} (review was due ${entry.review})`);
-}
+const { unexpected, stale, allowedCount } = classifyAudit(vulns, allowlist.allow, FAIL_AT, today);
 for (const line of stale)
     console.log(`WARN allowlist entry past its review date: ${line}`);
 console.log(`[deps] ${Object.keys(vulns).length} advisory package(s); ${allowedCount} allowlisted, ${unexpected.length} unexpected`);

package/dist/scripts/check-deps-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-deps-audit.js","sourceRoot":"","sources":["../../scripts/check-deps-audit.ts"],"names":[],"mappings":";AACA,wDAAwD;AACxD,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAM7B,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACvE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC;AAEzD,SAAS,OAAO,CAAC,GAAW,EAAE,KAAa;IACvC,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAc,CAAC;AAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAElE,IAAI,GAAW,CAAC;AAChB,IAAI,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9G,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,MAAM,GAAG,GAAI,KAA6B,CAAC,MAAM,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,GAAG,GAAG,GAAG,CAAC;AACd,CAAC;AAED,IAAI,KAAgC,CAAC;AACrC,IAAI,CAAC;IACD,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqD,CAAC,eAAe,IAAI,EAAE,CAAC;AACvG,CAAC;AAAC,MAAM,CAAC;IACL,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,MAAM,UAAU,GAAa,EAAE,CAAC;AAChC,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,SAAS;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aACrD,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,SAAS;IACb,CAAC;IACD,YAAY,EAAE,CAAC;IACf,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,MAAM,IAAI,IAAI,KAAK;IAAE,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;AAC5F,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,yBAAyB,YAAY,iBAAiB,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;AAErI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACxB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,UAAU;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC7F,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC"}
+{"version":3,"file":"check-deps-audit.js","sourceRoot":"","sources":["../../scripts/check-deps-audit.ts"],"names":[],"mappings":";AACA,wDAAwD;AACxD,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,yEAAyE;AACzE,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAmC,MAAM,0BAA0B,CAAC;AAI1F,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,KAAK,CAAC;AAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAc,CAAC;AAE9E,IAAI,GAAW,CAAC;AAChB,IAAI,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC9G,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACb,MAAM,GAAG,GAAI,KAA6B,CAAC,MAAM,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,GAAG,GAAG,GAAG,CAAC;AACd,CAAC;AAED,IAAI,KAAgC,CAAC;AACrC,IAAI,CAAC;IACD,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqD,CAAC,eAAe,IAAI,EAAE,CAAC;AACvG,CAAC;AAAC,MAAM,CAAC;IACL,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAElG,KAAK,MAAM,IAAI,IAAI,KAAK;IAAE,OAAO,CAAC,GAAG,CAAC,8CAA8C,IAAI,EAAE,CAAC,CAAC;AAC5F,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,yBAAyB,YAAY,iBAAiB,UAAU,CAAC,MAAM,aAAa,CAAC,CAAC;AAErI,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACxB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,UAAU;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAC7F,OAAO,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACpF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC"}

package/dist/scripts/deps-audit-classify.js

@@ -0,0 +1,79 @@
+// ─── Dependency advisory classification ───────────────
+//
+// Pure half of scripts/check-deps-audit.ts, split out so the policy can be
+// tested without the registry. An allowlist entry is a decision about specific
+// advisories, not a mute on a package: when npm reports advisory objects for a
+// package, every advisory id has to appear in that entry's `advisories`. A new
+// advisory against an already-allowlisted package therefore fails the gate
+// instead of riding along on an old reachability argument.
+const SEVERITY_ORDER = ['info', 'low', 'moderate', 'high', 'critical'];
+export function atLeast(severity, floor) {
+    return SEVERITY_ORDER.indexOf(severity) >= SEVERITY_ORDER.indexOf(floor);
+}
+/** GHSA id from an advisory object's url, falling back to npm's numeric source. */
+export function advisoryId(via) {
+    const fromUrl = via.url?.split('/').filter(Boolean).pop();
+    if (fromUrl)
+        return fromUrl;
+    return via.source !== undefined ? String(via.source) : '';
+}
+export function classifyAudit(vulns, allow, failAt, today) {
+    const allowed = new Map(allow.map(entry => [entry.package, entry]));
+    const unexpected = [];
+    const stale = [];
+    let allowedCount = 0;
+    for (const [name, vuln] of Object.entries(vulns)) {
+        if (!atLeast(vuln.severity, failAt))
+            continue;
+        const vias = vuln.via ?? [];
+        // A package's own severity is the max over its advisories and its
+        // children, so the threshold applies per advisory: a low advisory on a
+        // package flagged high only because of a child is below a moderate floor.
+        const advisories = vias
+            .filter((via) => typeof via !== 'string')
+            .filter(via => atLeast(via.severity ?? vuln.severity, failAt));
+        const paths = vias.filter((via) => typeof via === 'string');
+        // Transitive references are classified through their own records. A
+        // reference with no record means the report shape changed; fail closed
+        // rather than let that part of the finding pass unexamined.
+        const unresolved = paths.filter(ref => !(ref in vulns));
+        for (const ref of unresolved) {
+            unexpected.push(`${vuln.severity.toUpperCase()} ${name} — references ${ref}, which has no audit record`);
+        }
+        if (unresolved.length > 0)
+            continue;
+        if (advisories.length === 0 && paths.length === 0)
+            continue;
+        const entry = allowed.get(name);
+        if (!entry) {
+            const titles = advisories.map(via => via.title ?? '').filter(Boolean).slice(0, 2).join('; ');
+            const detail = titles || (paths.length > 0 ? `via ${paths.slice(0, 2).join(', ')}` : '');
+            const severity = advisories.length > 0 ? highest(advisories.map(via => via.severity ?? vuln.severity)) : vuln.severity;
+            unexpected.push(`${severity.toUpperCase()} ${name}${detail ? ` — ${detail}` : ''}`);
+            continue;
+        }
+        if (advisories.length > 0) {
+            if (!entry.advisories || entry.advisories.length === 0) {
+                const severity = highest(advisories.map(via => via.severity ?? vuln.severity));
+                unexpected.push(`${severity.toUpperCase()} ${name} — allowlist entry must list the advisory IDs it waives (${advisories.map(advisoryId).join(', ')})`);
+                continue;
+            }
+            const waived = new Set(entry.advisories);
+            const unlisted = advisories.filter(via => !waived.has(advisoryId(via)));
+            if (unlisted.length > 0) {
+                for (const via of unlisted) {
+                    unexpected.push(`${(via.severity ?? vuln.severity).toUpperCase()} ${name} — ${advisoryId(via)} ${via.title ?? ''} is not covered by its allowlist entry`.trimEnd());
+                }
+                continue;
+            }
+        }
+        allowedCount++;
+        if (entry.review < today)
+            stale.push(`${name} (review was due ${entry.review})`);
+    }
+    return { unexpected, stale, allowedCount };
+}
+function highest(severities) {
+    return severities.reduce((max, sev) => (SEVERITY_ORDER.indexOf(sev) > SEVERITY_ORDER.indexOf(max) ? sev : max), 'info');
+}
+//# sourceMappingURL=deps-audit-classify.js.map

package/dist/scripts/deps-audit-classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-audit-classify.js","sourceRoot":"","sources":["../../scripts/deps-audit-classify.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,2DAA2D;AAwB3D,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEvE,MAAM,UAAU,OAAO,CAAC,QAAgB,EAAE,KAAa;IACnD,OAAO,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,GAA8B;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1D,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,aAAa,CACzB,KAAgC,EAChC,KAAmB,EACnB,MAAc,EACd,KAAa;IAEb,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAE,SAAS;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QAC5B,kEAAkE;QAClE,uEAAuE;QACvE,0EAA0E;QAC1E,MAAM,UAAU,GAAG,IAAI;aAClB,MAAM,CAAC,CAAC,GAAG,EAAoC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;aAC1E,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC;QAC3E,oEAAoE;QACpE,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,iBAAiB,GAAG,6BAA6B,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzF,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvH,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpF,SAAS;QACb,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/E,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,IAAI,IAAI,4DAA4D,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvJ,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBACzB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,wCAAwC,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxK,CAAC;gBACD,SAAS;YACb,CAAC;QACL,CAAC;QACD,YAAY,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,oBAAoB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,UAAoB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5H,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli-jaw",
-  "version": "2.17.65",
+  "version": "2.17.66",
   "description": "Personal AI assistant powered by Pi, Antigravity, Claude, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Slack, Telegram, and Discord interfaces with 33 skills active by default from a 230-skill reference library",
   "type": "module",
   "keywords": [
@@ -153,6 +153,7 @@
     "verify:mac-signature": "node scripts/verify-mac-signature.mjs electron/dist/mac-arm64/cli-jaw.app",
     "verify:mac-dmg": "node scripts/verify-mac-signature.mjs --dmg",
     "verify:electron-update-metadata": "node scripts/verify-electron-update-metadata.mjs electron/dist electron/dist/mac-arm64/cli-jaw.app/Contents/Resources/app-update.yml",
+    "verify:electron-update-metadata:win": "node scripts/verify-electron-update-metadata.mjs --platform win",
     "electron:start": "npm --prefix electron run start",
     "check:cli-bin-links": "node scripts/check-cli-bin-links.cjs",
     "check:electron-sidecar-no-jwc": "node scripts/check-electron-sidecar-no-jwc.cjs",