create-dwy 0.25.2 → 0.26.0

package/templates/ai-tools/skills//345/217/221/345/270/203/345/217/221/347/211/210/dwy-sdk-spec/scripts/check_comments.py

@@ -1,260 +0,0 @@
-#!/usr/bin/env python3
-"""扫 Python docstring 与 JS/TS JSDoc 中的敏感模式。
-
-用法:
-    check_comments.py <root> [--sdk-paths <json>] [--format text|json]
-
-退出码:
-    0 = 无违规
-    1 = 有违规
-    2 = 用法错误
-"""
-from __future__ import annotations
-
-import argparse
-import ast
-import json
-import re
-import sys
-from dataclasses import dataclass, asdict
-from pathlib import Path
-from typing import Iterable
-
-
-# 敏感模式表，与 references/sensitive-patterns.md 对齐
-PATTERNS: list[tuple[str, re.Pattern[str]]] = [
-    ("internal-domain", re.compile(r"\b[\w-]+\.(internal|corp|local|intranet)\b", re.I)),
-    ("private-ip", re.compile(
-        r"\b(?:10\.\d{1,3}\.\d{1,3}\.\d{1,3}"
-        r"|192\.168\.\d{1,3}\.\d{1,3}"
-        r"|172\.(?:1[6-9]|2\d|3[01])\.\d{1,3}\.\d{1,3})\b"
-    )),
-    ("sql-statement", re.compile(
-        r"\b(SELECT|UPDATE|DELETE|INSERT)\b[^.\n]{0,80}\b(FROM|WHERE|SET|INTO)\b", re.I
-    )),
-    ("redis-key-pattern", re.compile(r"\b(cache|redis|fmt|lock|queue):[a-z_]+:")),
-    ("jira-ticket", re.compile(r"\b[A-Z]{2,6}-\d{2,6}\b")),
-    ("internal-service", re.compile(
-        r"\b[a-z_]+_(?:service|server|grpc|rpc)_(?:v\d|prod|stg|stage|dev)\b"
-    )),
-    ("aws-arn", re.compile(r"arn:aws:[a-z0-9-]+:[a-z0-9-]*:\d+:[a-zA-Z0-9-_/:]+")),
-    ("aws-key", re.compile(r"\bAKIA[0-9A-Z]{16}\b")),
-    ("cred-keyword", re.compile(
-        r"\b(API_KEY|TOKEN|SECRET|PASSWORD|PRIVATE_KEY)\s*[=:]\s*['\"][\w\-./+]{6,}['\"]"
-    )),
-]
-
-# 弱模式（仅在行内有上下文关键字时命中，降误报）
-PORT_PATTERN = re.compile(r":(\d{4,5})\b")
-PORT_CONTEXT = re.compile(r"\b(connect|server|host|endpoint|address|listen|bind)\b", re.I)
-
-EMAIL_PATTERN = re.compile(r"[\w.+-]+@[\w.-]+\.[a-z]{2,}")
-PUBLIC_EMAIL_DOMAINS = {
-    "example.com", "example.org", "example.net",
-    "gmail.com", "outlook.com", "hotmail.com", "qq.com", "163.com",
-    "yourdomain.com", "your-domain.com", "domain.com",
-}
-
-# 行内示例 / 占位关键字 → 整行视为示例不告警
-EXAMPLE_HINTS = re.compile(r"\b(example|示例|e\.g\.|placeholder|占位|your[- ]?domain|<.*>)\b", re.I)
-
-# 行内豁免
-IGNORE_MARKER = re.compile(r"#\s*sdk-spec:\s*ignore|//\s*sdk-spec:\s*ignore")
-
-
-@dataclass
-class Violation:
-    file: str
-    line: int
-    pattern: str
-    match: str
-    context: str
-
-
-def scan_text(file_rel: str, text: str, start_line_offset: int = 0) -> list[Violation]:
-    """扫一段连续文本（docstring 或注释块），返回违规列表。
-
-    `text` 内部带换行，`start_line_offset` 是该文本第一行在文件中的实际行号。
-    """
-    out: list[Violation] = []
-    for i, line in enumerate(text.splitlines(), start=start_line_offset):
-        if IGNORE_MARKER.search(line):
-            continue
-        line_stripped = line.strip()
-        if not line_stripped:
-            continue
-
-        is_example = bool(EXAMPLE_HINTS.search(line))
-
-        # 主模式
-        for pat_name, pat in PATTERNS:
-            for m in pat.finditer(line):
-                if is_example and pat_name in {"sql-statement", "internal-domain", "jira-ticket"}:
-                    continue
-                out.append(Violation(
-                    file=file_rel, line=i,
-                    pattern=pat_name, match=m.group(0),
-                    context=line_stripped[:160],
-                ))
-
-        # 端口（弱模式）
-        if not is_example and PORT_CONTEXT.search(line):
-            for m in PORT_PATTERN.finditer(line):
-                port = int(m.group(1))
-                if port in {8080, 8000, 3000, 5000, 5173, 5432, 6379, 9000}:
-                    # 常见示例端口，跳过
-                    continue
-                out.append(Violation(
-                    file=file_rel, line=i,
-                    pattern="service-port", match=m.group(0),
-                    context=line_stripped[:160],
-                ))
-
-        # 邮箱（弱模式）
-        if not is_example:
-            for m in EMAIL_PATTERN.finditer(line):
-                email = m.group(0)
-                domain = email.split("@", 1)[1].lower()
-                if domain in PUBLIC_EMAIL_DOMAINS:
-                    continue
-                out.append(Violation(
-                    file=file_rel, line=i,
-                    pattern="internal-email", match=email,
-                    context=line_stripped[:160],
-                ))
-    return out
-
-
-def scan_python_file(path: Path, root: Path) -> list[Violation]:
-    rel = str(path.relative_to(root))
-    try:
-        source = path.read_text(encoding="utf-8")
-    except (UnicodeDecodeError, OSError):
-        return []
-    try:
-        tree = ast.parse(source)
-    except SyntaxError:
-        return []
-
-    out: list[Violation] = []
-    # 模块、函数、类、异步函数的 docstring
-    for node in ast.walk(tree):
-        if not isinstance(node, (ast.Module, ast.FunctionDef, ast.AsyncFunctionDef, ast.ClassDef)):
-            continue
-        doc = ast.get_docstring(node, clean=False)
-        if not doc:
-            continue
-        # docstring 首行在 node.body[0].lineno（第一条 Expr 是字符串）
-        first_stmt = node.body[0] if isinstance(node, (ast.FunctionDef, ast.AsyncFunctionDef, ast.ClassDef)) else node.body[0]
-        start_line = getattr(first_stmt, "lineno", 1)
-        out.extend(scan_text(rel, doc, start_line_offset=start_line))
-    return out
-
-
-# 匹配 JS/TS 的 /** ... */ JSDoc 块（不含其他 /* */ 注释）
-JSDOC_BLOCK = re.compile(r"/\*\*(.*?)\*/", re.DOTALL)
-# 行注释 //
-LINE_COMMENT = re.compile(r"^\s*//\s?(.*)$")
-
-
-def scan_js_file(path: Path, root: Path) -> list[Violation]:
-    rel = str(path.relative_to(root))
-    try:
-        source = path.read_text(encoding="utf-8")
-    except (UnicodeDecodeError, OSError):
-        return []
-
-    out: list[Violation] = []
-
-    # JSDoc 块
-    for m in JSDOC_BLOCK.finditer(source):
-        block_text = m.group(1)
-        # 起始行号
-        start_line = source.count("\n", 0, m.start()) + 1
-        # 去掉每行的 leading * 和空白
-        cleaned_lines = []
-        for line in block_text.splitlines():
-            cleaned_lines.append(re.sub(r"^\s*\*\s?", "", line))
-        out.extend(scan_text(rel, "\n".join(cleaned_lines), start_line_offset=start_line))
-
-    # 行内注释（只扫描，因为商业 SDK 内部实现的行注释虽然不打包但开发期能看到）
-    # 注：源文件其实是否打包取决于配置，行注释泄露主要看是否打包 src/
-    # 跨边界谨慎起见也扫
-    for i, line in enumerate(source.splitlines(), start=1):
-        lm = LINE_COMMENT.match(line)
-        if not lm:
-            continue
-        comment = lm.group(1)
-        out.extend(scan_text(rel, comment, start_line_offset=i))
-
-    return out
-
-
-def iter_target_files(root: Path, sdk_paths: list[str] | None) -> Iterable[Path]:
-    """枚举要扫的文件。sdk_paths 为 None 时全扫；否则只扫指定路径。"""
-    excludes = {
-        "node_modules", ".venv", "venv", "dist", "build",
-        ".git", "__pycache__", ".mypy_cache", ".pytest_cache",
-        ".ruff_cache", ".tox", "egg-info", "site-packages",
-    }
-    bases = [root / p for p in sdk_paths] if sdk_paths else [root]
-    for base in bases:
-        if not base.exists():
-            continue
-        for p in base.rglob("*"):
-            if not p.is_file():
-                continue
-            if any(part in excludes or part.endswith(".egg-info") for part in p.parts):
-                continue
-            suf = p.suffix.lower()
-            if suf in {".py", ".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"}:
-                yield p
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser(description="Scan SDK comments for sensitive patterns.")
-    parser.add_argument("root", help="Project root directory (absolute path)")
-    parser.add_argument("--sdk-paths", default=None,
-                        help='JSON {"python":[...], "js":[...]} relative to root. Omit to scan all.')
-    parser.add_argument("--format", choices=["text", "json"], default="text")
-    args = parser.parse_args()
-
-    root = Path(args.root).resolve()
-    if not root.is_dir():
-        print(f"ERROR: not a directory: {root}", file=sys.stderr)
-        return 2
-
-    target_paths: list[str] | None = None
-    if args.sdk_paths:
-        try:
-            sdk_spec = json.loads(args.sdk_paths)
-        except json.JSONDecodeError as e:
-            print(f"ERROR: invalid --sdk-paths JSON: {e}", file=sys.stderr)
-            return 2
-        target_paths = []
-        for key in ("python", "js"):
-            target_paths.extend(sdk_spec.get(key, []))
-
-    violations: list[Violation] = []
-    for fp in iter_target_files(root, target_paths):
-        if fp.suffix == ".py":
-            violations.extend(scan_python_file(fp, root))
-        else:
-            violations.extend(scan_js_file(fp, root))
-
-    if args.format == "json":
-        print(json.dumps([asdict(v) for v in violations], ensure_ascii=False, indent=2))
-    else:
-        if not violations:
-            print("OK: no sensitive patterns found")
-        else:
-            print(f"FAIL: {len(violations)} violation(s) found:\n")
-            for v in violations:
-                print(f"  {v.file}:{v.line}  [{v.pattern}]  match={v.match!r}")
-                print(f"    > {v.context}")
-
-    return 1 if violations else 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())

package/templates/ai-tools/skills//345/217/221/345/270/203/345/217/221/347/211/210/dwy-sdk-spec/scripts/check_js_publish.sh

@@ -1,110 +0,0 @@
-#!/usr/bin/env bash
-# JS/TS SDK 发布前文件清单审计（npm pack --dry-run）
-# 用法: check_js_publish.sh <js_sdk_root> --edition commercial|opensource
-
-set -euo pipefail
-
-if [[ $# -lt 3 ]]; then
-  echo "Usage: $0 <js_sdk_root> --edition commercial|opensource" >&2
-  exit 2
-fi
-
-PKG_ROOT="$1"
-shift
-
-EDITION=""
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --edition) EDITION="$2"; shift 2 ;;
-    *) echo "ERROR: unknown arg: $1" >&2; exit 2 ;;
-  esac
-done
-
-if [[ "$EDITION" != "commercial" && "$EDITION" != "opensource" ]]; then
-  echo "ERROR: --edition must be 'commercial' or 'opensource'" >&2
-  exit 2
-fi
-
-if [[ ! -d "$PKG_ROOT" ]]; then
-  echo "ERROR: not a directory: $PKG_ROOT" >&2
-  exit 2
-fi
-
-if ! command -v npm >/dev/null 2>&1; then
-  echo "ERROR: npm not found in PATH" >&2
-  exit 2
-fi
-
-echo "[1/2] Running npm pack --dry-run in $PKG_ROOT ..."
-
-# npm pack --dry-run --json 输出包内文件列表
-# 注：某些 npm 版本 --json 输出到 stderr，--silent 抑制非 JSON 输出
-PACK_OUTPUT=$(cd "$PKG_ROOT" && npm pack --dry-run --json 2>/dev/null) || {
-  echo "ERROR: npm pack --dry-run failed; run 'npm install' first?" >&2
-  exit 2
-}
-
-# 提取文件路径列表
-FILES=$(echo "$PACK_OUTPUT" | jq -r '.[0].files[].path' 2>/dev/null) || {
-  echo "ERROR: failed to parse npm pack output:" >&2
-  echo "$PACK_OUTPUT" | head -20 >&2
-  exit 2
-}
-
-echo "[2/2] Audit result (edition=$EDITION):"
-echo "----------------------------------------"
-
-# 致命级（任何版本都禁）
-CRITICAL_REGEX='(^|/)(\.env(\..+)?|\.npmrc|\.pypirc|\.git-credentials|id_rsa|id_ed25519|secrets\.json|credentials\.json)$|\.(pem|key|p12)$|(^|/)\.aws/credentials$'
-
-# 开源版黑名单
-OPENSOURCE_DENY_REGEX='(^|/)(src|tests|__tests__|\.git|\.github|\.gitlab-ci\.yml|\.travis\.yml|\.circleci|\.vscode|\.idea|node_modules|\.husky)/|(^|/)(tsconfig.*\.json|vite\.config\.|vitest\.config\.|tsup\.config\.|rollup\.config\.|webpack\.config\.|jest\.config\.|\.eslintrc.*|\.prettierrc.*|eslint\.config\.|prettier\.config\.|commitlint\.config\.|\.gitignore|\.gitattributes|\.DS_Store|Thumbs\.db|pnpm-lock\.yaml|package-lock\.json|yarn\.lock)|\.(map|tsbuildinfo|swp|swo)$|\.(test|spec)\.(ts|tsx|js|jsx)$'
-
-# 商业版白名单（其他视为违规）
-COMMERCIAL_ALLOW_REGEX='^(dist/|bin/|package\.json$|README(\..+)?$|LICEN[SC]E(\..+)?$|CHANGELOG(\..+)?$)'
-
-violations=()
-critical=()
-
-while IFS= read -r f; do
-  [[ -z "$f" ]] && continue
-
-  if [[ "$f" =~ $CRITICAL_REGEX ]]; then
-    critical+=("$f")
-    continue
-  fi
-
-  if [[ "$EDITION" == "opensource" ]]; then
-    if [[ "$f" =~ $OPENSOURCE_DENY_REGEX ]]; then
-      violations+=("$f  [denied by opensource rules]")
-    fi
-  else
-    if [[ ! "$f" =~ $COMMERCIAL_ALLOW_REGEX ]]; then
-      violations+=("$f  [not in commercial whitelist]")
-    fi
-  fi
-done <<< "$FILES"
-
-if [[ ${#critical[@]} -gt 0 ]]; then
-  echo "[CRITICAL] secret-like files in package — DO NOT PUBLISH:"
-  for f in "${critical[@]}"; do
-    echo "  $f"
-  done
-  echo ""
-fi
-
-if [[ ${#violations[@]} -gt 0 ]]; then
-  echo "[VIOLATION] ${#violations[@]} file(s) violate $EDITION rules:"
-  for v in "${violations[@]}"; do
-    echo "  $v"
-  done
-  echo ""
-  exit 1
-fi
-
-if [[ ${#critical[@]} -gt 0 ]]; then
-  exit 1
-fi
-
-count=$(echo "$FILES" | grep -c .)
-echo "OK: package passes $EDITION audit ($count file(s))"

package/templates/ai-tools/skills//345/217/221/345/270/203/345/217/221/347/211/210/dwy-sdk-spec/scripts/check_python_publish.sh

@@ -1,171 +0,0 @@
-#!/usr/bin/env bash
-# Python SDK 发布前文件清单审计（不实际发布）
-# 用法: check_python_publish.sh <python_sdk_root> --edition commercial|opensource
-
-set -euo pipefail
-
-if [[ $# -lt 3 ]]; then
-  echo "Usage: $0 <python_sdk_root> --edition commercial|opensource" >&2
-  exit 2
-fi
-
-PKG_ROOT="$1"
-shift
-
-EDITION=""
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --edition) EDITION="$2"; shift 2 ;;
-    *) echo "ERROR: unknown arg: $1" >&2; exit 2 ;;
-  esac
-done
-
-if [[ "$EDITION" != "commercial" && "$EDITION" != "opensource" ]]; then
-  echo "ERROR: --edition must be 'commercial' or 'opensource'" >&2
-  exit 2
-fi
-
-if [[ ! -d "$PKG_ROOT" ]]; then
-  echo "ERROR: not a directory: $PKG_ROOT" >&2
-  exit 2
-fi
-
-if ! command -v python >/dev/null 2>&1 && ! command -v python3 >/dev/null 2>&1; then
-  echo "ERROR: python not found in PATH" >&2
-  exit 2
-fi
-PY=$(command -v python || command -v python3)
-
-# 临时构建目录
-TMPDIR=$(mktemp -d -t dwy-sdk-spec-py-XXXX)
-trap 'rm -rf "$TMPDIR"' EXIT
-
-echo "[1/3] Building wheel to $TMPDIR (--wheel: skip sdist 中转,商业 Cython 项目 MANIFEST 通常排除 _*.py 源码,默认 sdist→wheel 会失败) ..."
-(cd "$PKG_ROOT" && "$PY" -m build --wheel --outdir "$TMPDIR") >&2
-
-WHEEL=$(find "$TMPDIR" -name '*.whl' -type f | head -1)
-if [[ -z "$WHEEL" ]]; then
-  echo "ERROR: no wheel produced" >&2
-  exit 2
-fi
-echo "[2/3] Listing wheel contents: $(basename "$WHEEL")"
-
-# 列文件（剥掉 .dist-info 路径前缀，便于审计）
-FILES=$(unzip -Z1 "$WHEEL")
-
-# 致命级（任何版本都禁）
-declare -a CRITICAL_PATTERNS=(
-  '(^|/)\.env(\..+)?$'
-  '(^|/)\.npmrc$'
-  '(^|/)\.pypirc$'
-  '(^|/)\.git-credentials$'
-  '(^|/)id_rsa$'
-  '(^|/)id_ed25519$'
-  '\.pem$'
-  '\.key$'
-  '\.p12$'
-  '(^|/)secrets\.json$'
-  '(^|/)credentials\.json$'
-)
-
-# 开源版黑名单
-declare -a OPENSOURCE_DENY=(
-  '__pycache__/'
-  '\.pyc$'
-  '\.pyo$'
-  '\.egg-info/'
-  '\.mypy_cache/'
-  '\.pytest_cache/'
-  '\.ruff_cache/'
-  '\.pdb$'
-  '(^|/)\.git/'
-  '(^|/)\.gitignore$'
-  '(^|/)\.DS_Store$'
-  '(^|/)\.vscode/'
-  '(^|/)\.idea/'
-  '\.bak$'
-  '\.swp$'
-)
-
-# 商业版白名单（其他视为违规）
-declare -a COMMERCIAL_ALLOW=(
-  '\.so$'
-  '\.pyi$'
-  '(^|/)py\.typed$'
-  '\.dist-info/'
-  '(^|/)LICEN[SC]E(\..+)?$'
-  '(^|/)README(\..+)?$'
-  '\.json$'
-  '\.txt$'
-)
-
-violations=()
-critical=()
-
-while IFS= read -r f; do
-  [[ -z "$f" ]] && continue
-
-  # 致命级
-  for pat in "${CRITICAL_PATTERNS[@]}"; do
-    if [[ "$f" =~ $pat ]]; then
-      critical+=("$f")
-      continue 2
-    fi
-  done
-
-  if [[ "$EDITION" == "opensource" ]]; then
-    for pat in "${OPENSOURCE_DENY[@]}"; do
-      if [[ "$f" =~ $pat ]]; then
-        violations+=("$f  [denied: $pat]")
-        break
-      fi
-    done
-  else
-    # commercial: 白名单检查
-    # 排除目录条目（以 / 结尾）
-    [[ "$f" == */ ]] && continue
-    matched=0
-    for pat in "${COMMERCIAL_ALLOW[@]}"; do
-      if [[ "$f" =~ $pat ]]; then
-        matched=1
-        break
-      fi
-    done
-    # 单独允许：包根的 __init__.py（公开入口）/ 不以 _ 开头的 .py
-    if [[ $matched -eq 0 ]] && [[ "$f" =~ \.py$ ]]; then
-      base=$(basename "$f")
-      if [[ "$base" == "__init__.py" ]] || [[ ! "$base" =~ ^_ ]]; then
-        matched=1
-      fi
-    fi
-    if [[ $matched -eq 0 ]]; then
-      violations+=("$f  [not in commercial whitelist]")
-    fi
-  fi
-done <<< "$FILES"
-
-echo "[3/3] Audit result (edition=$EDITION):"
-echo "----------------------------------------"
-
-if [[ ${#critical[@]} -gt 0 ]]; then
-  echo "[CRITICAL] secret-like files in wheel — DO NOT PUBLISH:"
-  for f in "${critical[@]}"; do
-    echo "  $f"
-  done
-  echo ""
-fi
-
-if [[ ${#violations[@]} -gt 0 ]]; then
-  echo "[VIOLATION] ${#violations[@]} file(s) violate $EDITION rules:"
-  for v in "${violations[@]}"; do
-    echo "  $v"
-  done
-  echo ""
-  exit 1
-fi
-
-if [[ ${#critical[@]} -gt 0 ]]; then
-  exit 1
-fi
-
-echo "OK: wheel passes $EDITION audit ($(echo "$FILES" | wc -l | tr -d ' ') file(s))"

package/templates/ai-tools/skills//345/217/221/345/270/203/345/217/221/347/211/210/dwy-sdk-spec/scripts/detect_sdk.sh

@@ -1,71 +0,0 @@
-#!/usr/bin/env bash
-# 探测项目内的 Python / JS SDK 子包
-# 用法: detect_sdk.sh <project_root>
-# 输出: JSON {"python": [...], "js": [...]}  路径相对项目根
-
-set -euo pipefail
-
-PROJECT_ROOT="${1:-$(pwd)}"
-
-if [[ ! -d "$PROJECT_ROOT" ]]; then
-  echo "ERROR: not a directory: $PROJECT_ROOT" >&2
-  exit 2
-fi
-
-# 找 Python SDK：pyproject.toml 含 [project] 段，或 setup.py
-find_python_sdks() {
-  local results=()
-  # 项目根
-  if [[ -f "$PROJECT_ROOT/pyproject.toml" ]] && grep -q '^\[project\]' "$PROJECT_ROOT/pyproject.toml" 2>/dev/null; then
-    results+=(".")
-  elif [[ -f "$PROJECT_ROOT/setup.py" ]]; then
-    results+=(".")
-  fi
-  # 子目录（限 2 层深度，排除 node_modules / .venv / venv / dist / build / .git）
-  while IFS= read -r f; do
-    local d
-    d=$(dirname "$f")
-    local rel="${d#"$PROJECT_ROOT"/}"
-    # 验证含 [project] 段
-    if grep -q '^\[project\]' "$f" 2>/dev/null; then
-      results+=("$rel")
-    fi
-  done < <(find "$PROJECT_ROOT" -mindepth 2 -maxdepth 3 -name pyproject.toml -type f \
-           -not -path "*/node_modules/*" \
-           -not -path "*/.venv/*" \
-           -not -path "*/venv/*" \
-           -not -path "*/dist/*" \
-           -not -path "*/build/*" \
-           -not -path "*/.git/*" 2>/dev/null)
-
-  # 去重(空数组下 ${arr[@]} 在 set -u 会 unbound,用 ${arr[@]+...} 安全展开)
-  printf '%s\n' "${results[@]+"${results[@]}"}" | awk 'NF && !seen[$0]++'
-}
-
-# 找 JS SDK：package.json 含 main / exports / module 字段
-find_js_sdks() {
-  local results=()
-  if [[ -f "$PROJECT_ROOT/package.json" ]] && jq -e '.main // .exports // .module' "$PROJECT_ROOT/package.json" >/dev/null 2>&1; then
-    results+=(".")
-  fi
-  while IFS= read -r f; do
-    local d
-    d=$(dirname "$f")
-    local rel="${d#"$PROJECT_ROOT"/}"
-    if jq -e '.main // .exports // .module' "$f" >/dev/null 2>&1; then
-      results+=("$rel")
-    fi
-  done < <(find "$PROJECT_ROOT" -mindepth 2 -maxdepth 3 -name package.json -type f \
-           -not -path "*/node_modules/*" \
-           -not -path "*/.venv/*" \
-           -not -path "*/dist/*" \
-           -not -path "*/build/*" \
-           -not -path "*/.git/*" 2>/dev/null)
-
-  printf '%s\n' "${results[@]+"${results[@]}"}" | awk 'NF && !seen[$0]++'
-}
-
-python_list=$(find_python_sdks | jq -R . | jq -s .)
-js_list=$(find_js_sdks | jq -R . | jq -s .)
-
-jq -n --argjson py "$python_list" --argjson js "$js_list" '{python: $py, js: $js}'