devbrain-cli 0.2.0 → 0.3.0

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/is-unsafe/src/index.cjs

@@ -0,0 +1,27 @@
+// CommonJS shim — generated from src/index.js
+// For bundlers and Node.js environments that require CJS interop.
+// This file re-exports via dynamic import to bridge ESM → CJS.
+
+let _mod;
+async function _load() {
+  if (!_mod) _mod = await import('./index.js');
+  return _mod;
+}
+
+// Synchronous-style exports via module.exports proxy
+// (Works for environments that await the module, e.g. Jest with transformIgnorePatterns)
+module.exports = new Proxy(
+  {},
+  {
+    get(_, key) {
+      throw new Error(
+        `is-unsafe: CommonJS require() is not fully supported. ` +
+        `Use dynamic import(): const { isUnsafe } = await import('is-unsafe'). ` +
+        `Or set "type": "module" in your package.json.`
+      );
+    },
+  }
+);
+
+// Export the loader for async CJS callers
+module.exports.load = _load;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/is-unsafe/src/index.d.ts

@@ -0,0 +1,28 @@
+export type ContextName =
+  | 'HTML'
+  | 'XML'
+  | 'SVG'
+  | 'SQL'
+  | 'SQL-STRICT'
+  | 'SHELL'
+  | 'REDOS'
+  | 'NOSQL'
+  | 'LOG';
+
+export interface MatchResult {
+  context: string;
+  id: string;
+  description: string;
+  pattern: RegExp;
+}
+
+export type ContextArg = ContextName | ContextName[] | RegExp;
+
+export const VALID_CONTEXTS: { readonly [K in ContextName]: K };
+
+export function isUnsafe(value: string, context: ContextArg): boolean;
+export function whyUnsafe(value: string, context: ContextArg): MatchResult | null;
+export function allUnsafe(value: string, context: ContextArg): MatchResult[];
+
+declare const isUnsafeDefault: typeof isUnsafe;
+export default isUnsafeDefault;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/is-unsafe/src/index.js

@@ -0,0 +1,204 @@
+/**
+ * is-unsafe
+ *
+ * Zero-dependency, DOM-free, pure predicate for detecting unsafe strings
+ * across HTML, XML, SVG, SQL, SQL-STRICT, SHELL, REDOS, NOSQL, and LOG contexts.
+ *
+ * @module is-unsafe
+ */
+
+import CONTEXT_REGISTRY, { VALID_CONTEXTS } from './registry.js';
+
+/**
+ * @typedef {'HTML'|'XML'|'SVG'|'SQL'|'SQL-STRICT'|'SHELL'|'REDOS'|'NOSQL'|'LOG'} ContextName
+ */
+
+/**
+ * @typedef {Object} MatchResult
+ * @property {string} context   - The context in which the match was found
+ * @property {string} id        - Rule identifier
+ * @property {string} description - Human-readable description of what was matched
+ * @property {RegExp} pattern   - The pattern that matched
+ */
+
+// ─── Validation helpers ────────────────────────────────────────────────────
+
+/**
+ * Validate that `value` is a string. Throws TypeError if not.
+ * @param {unknown} value
+ */
+function assertString(value) {
+  if (typeof value !== 'string') {
+    throw new TypeError(
+      `is-unsafe: first argument must be a string, got ${typeof value}`
+    );
+  }
+}
+
+/**
+ * Validate that `context` is a recognised context name, an array of them,
+ * or a RegExp instance. Throws TypeError if not.
+ * @param {ContextName|ContextName[]|RegExp} context
+ */
+function assertContext(context) {
+  if (context instanceof RegExp) return;
+
+  if (typeof context === 'string') {
+    if (!CONTEXT_REGISTRY[context]) {
+      throw new TypeError(
+        `is-unsafe: unknown context "${context}". Valid contexts: ${Object.keys(VALID_CONTEXTS).join(', ')}`
+      );
+    }
+    return;
+  }
+
+  if (Array.isArray(context)) {
+    if (context.length === 0) {
+      throw new TypeError('is-unsafe: context array must not be empty');
+    }
+    for (const c of context) {
+      if (typeof c !== 'string' || !CONTEXT_REGISTRY[c]) {
+        throw new TypeError(
+          `is-unsafe: unknown context "${c}" in array. Valid contexts: ${Object.keys(VALID_CONTEXTS).join(', ')}`
+        );
+      }
+    }
+    return;
+  }
+
+  throw new TypeError(
+    `is-unsafe: second argument must be a context string, array of context strings, or RegExp. Got: ${typeof context}`
+  );
+}
+
+// ─── Core matching logic ───────────────────────────────────────────────────
+
+/**
+ * Test a single value against one named context's patterns.
+ * Returns the first matching MatchResult, or null if nothing matched.
+ *
+ * @param {string} value
+ * @param {string} contextName
+ * @returns {MatchResult|null}
+ */
+function matchContext(value, contextName) {
+  const patterns = CONTEXT_REGISTRY[contextName];
+  for (const rule of patterns) {
+    if (rule.pattern.test(value)) {
+      return { context: contextName, id: rule.id, description: rule.description, pattern: rule.pattern };
+    }
+  }
+  return null;
+}
+
+// ─── Public API ───────────────────────────────────────────────────────────
+
+/**
+ * Returns `true` if `value` is unsafe in the given context(s), `false` otherwise.
+ *
+ * @param {string} value           - The string to test
+ * @param {ContextName|ContextName[]|RegExp} context
+ *   - A named context ('HTML', 'XML', 'SVG', 'SQL', 'SQL-STRICT', 'SHELL', 'REDOS', 'NOSQL', 'LOG')
+ *   - An array of named contexts — returns true if unsafe in **any** of them
+ *   - A custom RegExp — returns true if the pattern matches
+ * @returns {boolean}
+ *
+ * @example
+ * isUnsafe('<script>alert(1)</script>', 'HTML')  // true
+ * isUnsafe('hello world', 'HTML')                // false
+ * isUnsafe('value', ['HTML', 'SQL'])             // false
+ * isUnsafe('value', /my-pattern/i)               // false
+ */
+function isUnsafe(value, context) {
+  assertString(value);
+  assertContext(context);
+
+  // Custom RegExp — caller-supplied pattern
+  if (context instanceof RegExp) {
+    return context.test(value);
+  }
+
+  // Single named context
+  if (typeof context === 'string') {
+    return matchContext(value, context) !== null;
+  }
+
+  // Array of named contexts — unsafe if ANY context matches
+  for (const c of context) {
+    if (matchContext(value, c) !== null) return true;
+  }
+  return false;
+}
+
+/**
+ * Like `isUnsafe`, but instead of a boolean returns the first `MatchResult`
+ * describing **why** the value was flagged, or `null` if it is safe.
+ *
+ * Useful for logging, error messages, or policy reporting.
+ *
+ * @param {string} value
+ * @param {ContextName|ContextName[]|RegExp} context
+ * @returns {MatchResult|null}
+ *
+ * @example
+ * whyUnsafe('<script>alert(1)</script>', 'HTML')
+ * // { context: 'HTML', id: 'html-script-open', description: '...', pattern: /.../ }
+ */
+function whyUnsafe(value, context) {
+  assertString(value);
+  assertContext(context);
+
+  if (context instanceof RegExp) {
+    return context.test(value)
+      ? { context: 'CUSTOM', id: 'custom-regex', description: 'Matched caller-supplied pattern', pattern: context }
+      : null;
+  }
+
+  if (typeof context === 'string') {
+    return matchContext(value, context);
+  }
+
+  for (const c of context) {
+    const result = matchContext(value, c);
+    if (result !== null) return result;
+  }
+  return null;
+}
+
+/**
+ * Returns all matching rules across the given context(s), or an empty array
+ * if the value is safe. Useful for comprehensive auditing.
+ *
+ * @param {string} value
+ * @param {ContextName|ContextName[]|RegExp} context
+ * @returns {MatchResult[]}
+ */
+function allUnsafe(value, context) {
+  assertString(value);
+  assertContext(context);
+
+  const results = [];
+
+  if (context instanceof RegExp) {
+    if (context.test(value)) {
+      results.push({ context: 'CUSTOM', id: 'custom-regex', description: 'Matched caller-supplied pattern', pattern: context });
+    }
+    return results;
+  }
+
+  const contexts = typeof context === 'string' ? [context] : context;
+
+  for (const c of contexts) {
+    const patterns = CONTEXT_REGISTRY[c];
+    for (const rule of patterns) {
+      if (rule.pattern.test(value)) {
+        results.push({ context: c, id: rule.id, description: rule.description, pattern: rule.pattern });
+      }
+    }
+  }
+
+  return results;
+}
+
+export { isUnsafe, whyUnsafe, allUnsafe, VALID_CONTEXTS };
+export default isUnsafe;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/is-unsafe/src/registry.js

@@ -0,0 +1,45 @@
+/**
+ * Context registry — maps context name strings to their pattern arrays.
+ *
+ * Adding a new context: create a file in ./contexts/, export a default array
+ * of pattern objects, and register it here.
+ *
+ * Context name guide:
+ *   SQL        — high-precision rules; safe for general text fields
+ *   SQL-STRICT — SQL + three noisier rules (line comments, stacked queries, hex);
+ *                use only for SQL-specific inputs
+ *   REDOS      — detects ReDoS-prone patterns when string will be compiled as RegExp
+ */
+
+import HTML_PATTERNS from './contexts/html.js';
+import XML_PATTERNS from './contexts/xml.js';
+import SVG_PATTERNS from './contexts/svg.js';
+import SQL_PATTERNS from './contexts/sql.js';
+import SQL_STRICT_PATTERNS from './contexts/sql-strict.js';
+import SHELL_PATTERNS from './contexts/shell.js';
+import REDOS_PATTERNS from './contexts/redos.js';
+import NOSQL_PATTERNS from './contexts/nosql.js';
+import LOG_PATTERNS from './contexts/log.js';
+
+/** @type {Record<string, Array<{id: string, description: string, pattern: RegExp}>>} */
+const CONTEXT_REGISTRY = {
+  HTML: HTML_PATTERNS,
+  XML: XML_PATTERNS,
+  SVG: SVG_PATTERNS,
+  SQL: SQL_PATTERNS,
+  'SQL-STRICT': SQL_STRICT_PATTERNS,
+  SHELL: SHELL_PATTERNS,
+  REDOS: REDOS_PATTERNS,
+  NOSQL: NOSQL_PATTERNS,
+  LOG: LOG_PATTERNS,
+};
+
+export default CONTEXT_REGISTRY;
+
+/**
+ * Enum of valid context names — e.g. `VALID_CONTEXTS.HTML === 'HTML'`.
+ * @type {Record<string, string>}
+ */
+export const VALID_CONTEXTS = Object.freeze(
+  Object.fromEntries(Object.keys(CONTEXT_REGISTRY).map((k) => [k, k]))
+);

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/browser.js

@@ -0,0 +1,8 @@
+const logSymbols = {
+	info: 'ℹ️',
+	success: '✅',
+	warning: '⚠️',
+	error: '❌️',
+};
+
+export default logSymbols;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/index.d.ts

@@ -0,0 +1,22 @@
+/**
+Colored symbols for various log levels.
+
+Includes fallbacks for Windows CMD which only supports a [limited character set](https://en.wikipedia.org/wiki/Code_page_437).
+
+@example
+```
+import logSymbols from 'log-symbols';
+
+console.log(logSymbols.success, 'Finished successfully!');
+// Terminals with Unicode support:     ✔ Finished successfully!
+// Terminals without Unicode support:  √ Finished successfully!
+```
+*/
+declare const logSymbols: {
+	readonly info: string;
+	readonly success: string;
+	readonly warning: string;
+	readonly error: string;
+};
+
+export default logSymbols;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/index.js

@@ -0,0 +1,20 @@
+import chalk from 'chalk';
+import isUnicodeSupported from 'is-unicode-supported';
+
+const main = {
+	info: chalk.blue('ℹ'),
+	success: chalk.green('✔'),
+	warning: chalk.yellow('⚠'),
+	error: chalk.red('✖'),
+};
+
+const fallback = {
+	info: chalk.blue('i'),
+	success: chalk.green('√'),
+	warning: chalk.yellow('‼'),
+	error: chalk.red('×'),
+};
+
+const logSymbols = isUnicodeSupported() ? main : fallback;
+
+export default logSymbols;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/node_modules/is-unicode-supported/index.d.ts

@@ -0,0 +1,12 @@
+/**
+Detect whether the terminal supports Unicode.
+
+@example
+```
+import isUnicodeSupported from 'is-unicode-supported';
+
+isUnicodeSupported();
+//=> true
+```
+*/
+export default function isUnicodeSupported(): boolean;

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/node_modules/is-unicode-supported/index.js

@@ -0,0 +1,17 @@
+import process from 'node:process';
+
+export default function isUnicodeSupported() {
+	if (process.platform !== 'win32') {
+		return process.env.TERM !== 'linux'; // Linux console (kernel)
+	}
+
+	return Boolean(process.env.CI)
+		|| Boolean(process.env.WT_SESSION) // Windows Terminal
+		|| Boolean(process.env.TERMINUS_SUBLIME) // Terminus (<0.2.27)
+		|| process.env.ConEmuTask === '{cmd::Cmder}' // ConEmu and cmder
+		|| process.env.TERM_PROGRAM === 'Terminus-Sublime'
+		|| process.env.TERM_PROGRAM === 'vscode'
+		|| process.env.TERM === 'xterm-256color'
+		|| process.env.TERM === 'alacritty'
+		|| process.env.TERMINAL_EMULATOR === 'JetBrains-JediTerm';
+}

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/node_modules/is-unicode-supported/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/node_modules/is-unicode-supported/package.json

@@ -0,0 +1,43 @@
+{
+	"name": "is-unicode-supported",
+	"version": "1.3.0",
+	"description": "Detect whether the terminal supports Unicode",
+	"license": "MIT",
+	"repository": "sindresorhus/is-unicode-supported",
+	"funding": "https://github.com/sponsors/sindresorhus",
+	"author": {
+		"name": "Sindre Sorhus",
+		"email": "sindresorhus@gmail.com",
+		"url": "https://sindresorhus.com"
+	},
+	"type": "module",
+	"exports": "./index.js",
+	"engines": {
+		"node": ">=12"
+	},
+	"scripts": {
+		"test": "xo && ava && tsd"
+	},
+	"files": [
+		"index.js",
+		"index.d.ts"
+	],
+	"keywords": [
+		"terminal",
+		"unicode",
+		"detect",
+		"utf8",
+		"console",
+		"shell",
+		"support",
+		"supports",
+		"supported",
+		"check",
+		"detection"
+	],
+	"devDependencies": {
+		"ava": "^4.0.1",
+		"tsd": "^0.19.1",
+		"xo": "^0.47.0"
+	}
+}

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/node_modules/is-unicode-supported/readme.md

@@ -0,0 +1,35 @@
+# is-unicode-supported
+
+> Detect whether the terminal supports Unicode
+
+This can be useful to decide whether to use Unicode characters or fallback ASCII characters in command-line output.
+
+Note that the check is quite naive. It just assumes all non-Windows terminals support Unicode and hard-codes which Windows terminals that do support Unicode. However, I have been using this logic in some popular packages for years without problems.
+
+## Install
+
+```sh
+npm install is-unicode-supported
+```
+
+## Usage
+
+```js
+import isUnicodeSupported from 'is-unicode-supported';
+
+isUnicodeSupported();
+//=> true
+```
+
+## API
+
+### isUnicodeSupported()
+
+Returns a `boolean` for whether the terminal supports Unicode.
+
+## Related
+
+- [is-interactive](https://github.com/sindresorhus/is-interactive) - Check if stdout or stderr is interactive
+- [supports-color](https://github.com/chalk/supports-color) - Detect whether a terminal supports color
+- [figures](https://github.com/sindresorhus/figures) - Unicode symbols with Windows fallbacks
+- [log-symbols](https://github.com/sindresorhus/log-symbols) - Colored symbols for various log levels

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/package.json

@@ -0,0 +1,57 @@
+{
+	"name": "log-symbols",
+	"version": "6.0.0",
+	"description": "Colored symbols for various log levels. Example: `✔︎ Success`",
+	"license": "MIT",
+	"repository": "sindresorhus/log-symbols",
+	"funding": "https://github.com/sponsors/sindresorhus",
+	"author": {
+		"name": "Sindre Sorhus",
+		"email": "sindresorhus@gmail.com",
+		"url": "https://sindresorhus.com"
+	},
+	"type": "module",
+	"exports": {
+		"types": "./index.d.ts",
+		"node": "./index.js",
+		"default": "./browser.js"
+	},
+	"engines": {
+		"node": ">=18"
+	},
+	"scripts": {
+		"test": "xo && ava && tsd"
+	},
+	"files": [
+		"index.js",
+		"index.d.ts",
+		"browser.js"
+	],
+	"keywords": [
+		"unicode",
+		"cli",
+		"cmd",
+		"command-line",
+		"characters",
+		"symbol",
+		"symbols",
+		"figure",
+		"figures",
+		"fallback",
+		"windows",
+		"log",
+		"logging",
+		"terminal",
+		"stdout"
+	],
+	"dependencies": {
+		"chalk": "^5.3.0",
+		"is-unicode-supported": "^1.3.0"
+	},
+	"devDependencies": {
+		"ava": "^5.3.1",
+		"strip-ansi": "^7.1.0",
+		"tsd": "^0.29.0",
+		"xo": "^0.56.0"
+	}
+}

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/log-symbols/readme.md

@@ -0,0 +1,39 @@
+# log-symbols
+
+<img src="screenshot.png" width="226" height="192" align="right">
+
+> Colored symbols for various log levels
+
+Includes fallbacks for Windows CMD which only supports a [limited character set](https://en.wikipedia.org/wiki/Code_page_437).
+
+## Install
+
+```sh
+npm install log-symbols
+```
+
+## Usage
+
+```js
+import logSymbols from 'log-symbols';
+
+console.log(logSymbols.success, 'Finished successfully!');
+// Terminals with Unicode support:     ✔ Finished successfully!
+// Terminals without Unicode support:  √ Finished successfully!
+```
+
+## API
+
+### logSymbols
+
+#### info
+#### success
+#### warning
+#### error
+
+## Related
+
+- [figures](https://github.com/sindresorhus/figures) - Unicode symbols with Windows CMD fallbacks
+- [py-log-symbols](https://github.com/ManrajGrover/py-log-symbols) - Python port
+- [log-symbols](https://github.com/palash25/log-symbols) - Ruby port
+- [guumaster/logsymbols](https://github.com/guumaster/logsymbols) - Golang port

package/dist/temp-prefix/node_modules/devbrain-cli/node_modules/merge2/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014-2020 Teambition
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.