haraka 3.3.0 → 3.3.1

package/.prettierignore

@@ -1,4 +1,5 @@
 docs/*.md
+AGENTS.md
 CHANGELOG.md
 CONTRIBUTORS.md
 Plugins.md

package/CHANGELOG.md

@@ -4,12 +4,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
-### [3.3.0] - 2026-06-03
+### [3.3.1] - 2026-06-12
 
-- fix(haraka): wrap util.createFile in a try
+- fix(conn): flag soft queue denials in results
+- feat: expose fetch to plugins
+- change: remove @haraka/email-address wrapper #3598
+- change: log when MFROM or RCPT fail to parse #3581
+- fix: change package name from Haraka to haraka #3596
+- fix(haraka): wrap util.createFile in a try #3595
 - fix(conn): update local and remote results after proxy #3593
 - feat(conn): add main.postel option #3592
-- change: log when MFROM or RCPT fail to parse #3581
 - feat: proxy support for smtps (465) #3577
 - refactor(auth_proxy): use net_utils.endpoint #3584
 - refactor: move endpoint, HostPool, LineSocket to net-utils #3583
@@ -1891,4 +1895,4 @@ config files.
 [3.1.7]: https://github.com/haraka/Haraka/releases/tag/v3.1.7
 [3.2.0]: https://github.com/haraka/Haraka/releases/tag/v3.2.0
 [3.2.1]: https://github.com/haraka/Haraka/releases/tag/v3.2.1
-[3.3.0]: https://github.com/haraka/Haraka/releases/tag/v3.3.0
+[3.3.1]: https://github.com/haraka/Haraka/releases/tag/v3.3.1

package/bin/haraka

@@ -414,7 +414,7 @@ if (parsed.version) {
   plugins.load_plugins(parsed.test && parsed.test[0] !== 'all' ? parsed.test : null)
   const Connection = require(path.join(base, 'connection'))
   // var Transaction = require(path.join(base, "transaction"));
-  const Address = require('../address').Address
+  const Address = require('@haraka/email-address').Address
   const Notes = require('haraka-notes')
   const constants = require('haraka-constants')
   const client = {

package/connection.js

@@ -11,7 +11,7 @@ const constants = require('haraka-constants')
 const net_utils = require('haraka-net-utils')
 const Notes = require('haraka-notes')
 const utils = require('haraka-utils')
-const { Address } = require('./address')
+const { Address } = require('@haraka/email-address')
 const ResultStore = require('haraka-results')
 
 // Haraka libs
@@ -1698,9 +1698,11 @@ class Connection {
                 break
             case constants.deny:
             case constants.denydisconnect:
+                this.transaction.results.add(res_as, { fail: msg })
+                break
             case constants.denysoft:
             case constants.denysoftdisconnect:
-                this.transaction.results.add(res_as, { fail: msg })
+                this.transaction.results.add(res_as, { fail: msg, soft: true })
                 break
             case constants.cont:
                 break

package/contrib/bsd-rc.d/haraka

@@ -6,6 +6,8 @@
 # REQUIRE: NETWORKING ldconfig
 # KEYWORD: shutdown
 
+PATH="$PATH:/usr/local/bin"
+
 . /etc/rc.subr
 
 name="haraka"

package/outbound/hmail.js

@@ -7,7 +7,7 @@ const dns = require('node:dns')
 const net = require('node:net')
 const path = require('node:path')
 
-const { Address } = require('../address')
+const { Address } = require('@haraka/email-address')
 const config = require('haraka-config')
 const constants = require('haraka-constants')
 const DSN = require('haraka-dsn')

package/outbound/index.js

@@ -3,7 +3,7 @@
 const fs = require('node:fs/promises')
 const path = require('node:path')
 
-const { Address } = require('../address')
+const { Address } = require('@haraka/email-address')
 const config = require('haraka-config')
 const constants = require('haraka-constants')
 const net_utils = require('haraka-net-utils')

package/outbound/queue.js

@@ -4,7 +4,7 @@ const child_process = require('node:child_process')
 const fs = require('node:fs/promises')
 const path = require('node:path')
 
-const { Address } = require('../address')
+const { Address } = require('@haraka/email-address')
 const config = require('haraka-config')
 const utils = require('haraka-utils')
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "author": "Matt Sergeant <helpme@gmail.com> (http://baudehlo.com/)",
+  "author": "Matt Sergeant <helpme@gmail.com>",
   "name": "haraka",
   "license": "MIT",
   "description": "An SMTP Server project.",
@@ -9,7 +9,7 @@
     "server",
     "email"
   ],
-  "version": "3.3.0",
+  "version": "3.3.1",
   "homepage": "http://haraka.github.io",
   "repository": {
     "type": "git",
@@ -20,22 +20,22 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@haraka/email-address": "~3.1.5",
-    "haraka-config": "~1.6.2",
+    "@haraka/email-address": "~3.1.6",
+    "haraka-config": "~1.6.3",
     "haraka-constants": "~1.0.8",
     "haraka-dsn": "~1.2.0",
     "haraka-email-message": "~1.4.0",
-    "haraka-net-utils": "~1.9.1",
+    "haraka-net-utils": "~1.9.2",
     "haraka-notes": "~1.1.3",
     "haraka-plugin-redis": "~2.1.0",
-    "haraka-results": "~2.3.2",
-    "haraka-tld": "~1.3.5",
-    "haraka-utils": "~2.2.0",
+    "haraka-results": "~2.4.0",
+    "haraka-tld": "~1.3.6",
+    "haraka-utils": "~2.2.1",
     "ipaddr.js": "~2.4.0",
-    "node-gyp": "~12.3.0",
-    "nopt": "~10.0.0",
+    "node-gyp": "~12.4.0",
+    "nopt": "~10.0.1",
     "redis": "~6.0.0",
-    "semver": "~7.8.1"
+    "semver": "~7.8.4"
   },
   "optionalDependencies": {
     "@haraka/ocsp": "~1.2.0",
@@ -43,7 +43,7 @@
     "haraka-plugin-aliases": "~1.1.0",
     "haraka-plugin-asn": "~2.2.0",
     "haraka-plugin-attachment": "~1.2.1",
-    "haraka-plugin-bounce": "~2.2.0",
+    "haraka-plugin-bounce": "~2.2.1",
     "haraka-plugin-clamd": "~1.0.3",
     "haraka-plugin-dcc": "~1.0.3",
     "haraka-plugin-dkim": "~1.2.0",
@@ -53,10 +53,10 @@
     "haraka-plugin-geoip": "~1.1.2",
     "haraka-plugin-greylist": "~1.2.1",
     "haraka-plugin-headers": "~1.2.0",
-    "haraka-plugin-helo.checks": "~1.1.1",
-    "haraka-plugin-karma": "~2.5.1",
+    "haraka-plugin-helo.checks": "~1.1.3",
+    "haraka-plugin-karma": "~2.5.2",
     "haraka-plugin-known-senders": "~1.2.0",
-    "haraka-plugin-limit": "~1.3.1",
+    "haraka-plugin-limit": "~1.3.2",
     "haraka-plugin-mail_from.is_resolvable": "~1.3.0",
     "haraka-plugin-messagesniffer": "~1.0.2",
     "haraka-plugin-qmail-deliverable": "~1.4.0",
@@ -64,21 +64,22 @@
     "haraka-plugin-rspamd": "~1.6.0",
     "haraka-plugin-spamassassin": "~1.1.0",
     "haraka-plugin-spf": "~1.3.0",
-    "haraka-plugin-syslog": "~1.1.1",
+    "haraka-plugin-syslog": "~1.1.2",
     "haraka-plugin-uribl": "~2.0.0"
   },
   "devDependencies": {
     "@haraka/eslint-config": "~3.0.0",
     "haraka-test-fixtures": "^1.7.1",
-    "mock-require": "~3.0.3"
+    "mock-require": "~3.0.3",
+    "toobusy-js": "^0.5.1"
   },
   "bugs": {
     "mail": "haraka.mail@gmail.com",
     "url": "https://github.com/haraka/Haraka/issues"
   },
   "bin": {
-    "haraka": "./bin/haraka",
-    "haraka_grep": "./bin/haraka_grep"
+    "haraka": "bin/haraka",
+    "haraka_grep": "bin/haraka_grep"
   },
   "scripts": {
     "prepare": "git rev-parse --git-dir >/dev/null 2>&1 && git config core.hooksPath .githooks || true",
@@ -89,8 +90,8 @@
     "prettier:fix": "npx prettier . --write --log-level=warn",
     "qlty": "qlty smells --all",
     "test": "sh ./run_tests",
-    "test:coverage": "node --test --test-concurrency=1 --experimental-test-coverage",
-    "test:coverage:lcov": "mkdir -p coverage && node --test --test-concurrency=1 --experimental-test-coverage --test-reporter=lcov --test-reporter-destination=coverage/lcov.info",
+    "test:coverage": "node --test --test-concurrency=1 --experimental-test-coverage --test-coverage-include=*.js --test-coverage-include=plugins/**/*.js --test-coverage-include=outbound/*.js",
+    "test:coverage:lcov": "mkdir -p coverage && node --test --test-concurrency=1 --experimental-test-coverage --test-reporter=lcov --test-reporter-destination=coverage/lcov.info --test-coverage-include=*.js --test-coverage-include=plugins/**/*.js --test-coverage-include=outbound/*.js",
     "versions": "npx npm-dep-mgr check",
     "versions:fix": "npx npm-dep-mgr update"
   },

package/plugins.js

@@ -197,11 +197,12 @@ class Plugin {
             __filename: pp,
             __dirname: path.dirname(pp),
             exports: this,
-            setTimeout,
+            fetch,
             clearTimeout,
-            setInterval,
             clearInterval,
             process,
+            setInterval,
+            setTimeout,
             Buffer,
             Math,
             server: plugins.server,
@@ -585,7 +586,7 @@ function get_denyfn(object, hook, params, retval, msg, respond_method) {
         switch (deny_retval) {
             case constants.ok:
                 // Override rejection
-                object.loginfo(`deny(soft?) overriden by deny hook${deny_msg ? ': deny_msg' : ''}`)
+                object.loginfo(`deny(soft?) overridden by deny hook${deny_msg ? ': deny_msg' : ''}`)
                 // Restore hooks_to_run with saved copy so that
                 // any other plugins on this hook can also run.
                 if (object.saved_hooks_to_run.length > 0) {

package/test/connection.js

@@ -5,7 +5,7 @@ const assert = require('node:assert/strict')
 
 const constants = require('haraka-constants')
 const DSN = require('haraka-dsn')
-const { Address } = require('../address')
+const { Address } = require('@haraka/email-address')
 
 const connection = require('../connection')
 const Server = require('../server')
@@ -508,7 +508,10 @@ describe('connection', () => {
                 assert.equal(this.connection.msg_count.tempfail, 1)
                 assert.equal(this.connection.transaction.msg_status, 'deferred')
                 assert.equal(harness.calls.reset, 1)
-                assert.deepEqual(harness.calls.results[0], { fail: 'Message denied temporarily' })
+                assert.deepEqual(harness.calls.results[0], {
+                    fail: 'Message denied temporarily',
+                    soft: true,
+                })
             } finally {
                 harness.restore()
             }

package/test/fixtures/util_hmailitem.js

@@ -2,7 +2,7 @@
 
 const assert = require('node:assert')
 
-const { Address } = require('../../address')
+const { Address } = require('@haraka/email-address')
 const fixtures = require('haraka-test-fixtures')
 
 /**

package/test/outbound/index.js

@@ -210,7 +210,7 @@ describe('outbound', () => {
         it('yields to setImmediate before opening process_delivery pipes', async () => {
             const stream = require('node:stream')
             const Transaction = require('../../transaction')
-            const Address = require('../../address').Address
+            const Address = require('@haraka/email-address').Address
             const outbound = require('../../outbound')
             const plugins = require('../../plugins')
 
@@ -270,7 +270,7 @@ describe('outbound', () => {
 
         it('adds missing Message-Id/Date and prepends Received before queueing', async () => {
             process.env.HARAKA_TEST_DIR = path.resolve('test')
-            const Address = require('../../address').Address
+            const Address = require('@haraka/email-address').Address
             const outbound = require('../../outbound')
             const plugins = require('../../plugins')
 

package/test/plugins/auth/auth_base.js

@@ -2,7 +2,7 @@
 const assert = require('node:assert')
 const { describe, it, beforeEach } = require('node:test')
 
-const { Address } = require('../../../address')
+const { Address } = require('@haraka/email-address')
 const { makeConnection, makePlugin } = require('haraka-test-fixtures')
 const utils = require('haraka-utils')
 

package/test/plugins/queue/smtp_forward.js

@@ -5,7 +5,7 @@ const assert = require('node:assert/strict')
 const { EventEmitter } = require('node:events')
 const path = require('node:path')
 
-const { Address } = require('../../../address')
+const { Address } = require('@haraka/email-address')
 const { makeConnection, makePlugin } = require('haraka-test-fixtures')
 const Notes = require('haraka-notes')
 

package/test/plugins/rcpt_to.host_list_base.js

@@ -2,7 +2,7 @@
 const assert = require('node:assert/strict')
 const { describe, it, beforeEach } = require('node:test')
 
-const { Address } = require('../../address')
+const { Address } = require('@haraka/email-address')
 const { assertResult, makeConnection, makePlugin } = require('haraka-test-fixtures')
 
 const _set_up = () => {

package/test/plugins/rcpt_to.in_host_list.js

@@ -2,7 +2,7 @@
 const assert = require('node:assert/strict')
 const { describe, it, beforeEach } = require('node:test')
 
-const { Address } = require('../../address')
+const { Address } = require('@haraka/email-address')
 const fixtures = require('haraka-test-fixtures')
 const { assertResult, makeConnection, makePlugin } = fixtures
 require('haraka-constants').import(global)

package/test/plugins/toobusy.js

@@ -1,21 +1,198 @@
 'use strict'
 
 const assert = require('node:assert/strict')
-const { describe, it } = require('node:test')
+const { beforeEach, describe, it } = require('node:test')
 
-const { makePlugin } = require('haraka-test-fixtures')
+const { makeConnection, makePlugin } = require('haraka-test-fixtures')
+require('haraka-constants').import(global)
 
 describe('toobusy', () => {
+    let plugin
+
+    beforeEach(() => {
+        plugin = makePlugin('toobusy', { register: false })
+    })
+
     describe('register', () => {
-        it('handles missing toobusy-js gracefully (does not throw)', () => {
-            const plugin = makePlugin('toobusy', { register: false })
-            // toobusy-js is not installed; register should catch the error and return
-            let registered = false
-            plugin.register_hook = () => {
-                registered = true
+        it('registers connect hook with correct priority', () => {
+            const hooks = []
+            plugin.register_hook = function (hook, name, priority) {
+                hooks.push({ hook, name, priority })
             }
+
+            plugin.register()
+
+            assert.equal(hooks.length, 1, 'should register one hook')
+            assert.equal(hooks[0].hook, 'connect')
+            assert.equal(hooks[0].name, 'check_busy')
+            assert.equal(hooks[0].priority, -100)
+        })
+
+        it('loads config on register', () => {
+            let loadConfigCalled = false
+            const originalLoadConfig = plugin.loadConfig
+            plugin.loadConfig = function () {
+                loadConfigCalled = true
+                return originalLoadConfig.call(this)
+            }
+
+            plugin.register()
+
+            assert.equal(loadConfigCalled, true, 'loadConfig should be called')
+        })
+
+        it('handles missing toobusy-js gracefully', () => {
             assert.doesNotThrow(() => plugin.register())
-            assert.equal(registered, false, 'hook should not be registered without toobusy-js')
+        })
+    })
+
+    describe('loadConfig', () => {
+        beforeEach(() => {
+            plugin.register()
+        })
+
+        it('gets toobusy.maxlag config value', () => {
+            let configArgs = []
+
+            plugin.config.get = function (key, type, callback) {
+                configArgs = [key, type]
+                return '70'
+            }
+
+            plugin.loadConfig()
+
+            assert.equal(configArgs[0], 'toobusy.maxlag')
+            assert.equal(configArgs[1], 'value')
+        })
+
+        it('passes callback to config.get for hot reload', () => {
+            let callbackProvided = false
+
+            plugin.config.get = function (key, type, callback) {
+                callbackProvided = typeof callback === 'function'
+                return '70'
+            }
+
+            plugin.loadConfig()
+
+            assert.equal(callbackProvided, true, 'callback should be provided for hot reload')
+        })
+
+        it('handles zero maxLag value', () => {
+            plugin.config.get = () => '0'
+
+            assert.doesNotThrow(() => {
+                plugin.loadConfig()
+            })
+        })
+
+        it('handles non-numeric maxLag value', () => {
+            plugin.config.get = () => 'notanumber'
+
+            assert.doesNotThrow(() => {
+                plugin.loadConfig()
+            })
+        })
+
+        it('handles empty string maxLag value', () => {
+            plugin.config.get = () => ''
+
+            assert.doesNotThrow(() => {
+                plugin.loadConfig()
+            })
+        })
+
+        it('parses numeric maxLag as integer', () => {
+            plugin.config.get = () => '100'
+
+            assert.doesNotThrow(() => {
+                plugin.loadConfig()
+            })
+        })
+
+        it('supports reload via callback', () => {
+            let callbackFn = null
+
+            plugin.config.get = function (key, type, callback) {
+                callbackFn = callback
+                return '70'
+            }
+
+            plugin.loadConfig()
+
+            assert.equal(typeof callbackFn, 'function', 'callback should be provided')
+            assert.doesNotThrow(() => {
+                if (callbackFn) callbackFn()
+            })
+        })
+    })
+
+    describe('check_busy', () => {
+        beforeEach(() => {
+            plugin.register()
+        })
+
+        it('calls next without args when not busy', (t, done) => {
+            plugin.config.get = () => '70'
+            plugin.loadConfig()
+
+            plugin.check_busy(function (...args) {
+                assert.equal(args.length, 0, 'should call next with no arguments')
+                done()
+            })
+        })
+
+        it('initializes was_busy state', (t, done) => {
+            plugin.config.get = () => '70'
+            plugin.loadConfig()
+
+            plugin.check_busy(function () {
+                done()
+            })
+        })
+
+        it('is a callable function', () => {
+            assert.equal(typeof plugin.check_busy, 'function')
+        })
+
+        it('does not log when not busy', (t, done) => {
+            plugin.config.get = () => '70'
+            plugin.loadConfig()
+
+            let logCount = 0
+            plugin.logcrit = function () {
+                logCount++
+            }
+
+            plugin.check_busy(function () {
+                plugin.check_busy(function () {
+                    assert.equal(logCount, 0, 'should not log when not busy')
+                    done()
+                })
+            })
+        })
+
+        it('accepts next callback', (t, done) => {
+            plugin.config.get = () => '70'
+            plugin.loadConfig()
+
+            const nextFn = function () {
+                done()
+            }
+
+            assert.doesNotThrow(() => {
+                plugin.check_busy(nextFn)
+            })
+        })
+
+        it('works with connection context', (t, done) => {
+            plugin.config.get = () => '70'
+            plugin.loadConfig()
+
+            const conn = makeConnection()
+            plugin.check_busy.call(conn, function () {
+                done()
+            })
         })
     })
 })

package/test/smtp_client.js

@@ -5,7 +5,7 @@ const assert = require('node:assert/strict')
 const { PassThrough } = require('node:stream')
 const path = require('node:path')
 
-const { Address } = require('../address')
+const { Address } = require('@haraka/email-address')
 const fixtures = require('haraka-test-fixtures')
 const net_utils = require('haraka-net-utils')
 const message = require('haraka-email-message')

package/.claude/settings.local.json

@@ -1,28 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(npm test:*)",
-      "Bash(grep -r 3388 . --include=*.md --include=*.js)",
-      "Bash(git show-ref:*)",
-      "Bash(git symbolic-ref:*)",
-      "Bash(curl -s https://api.github.com/repos/haraka/Haraka/issues/3388)",
-      "WebFetch(domain:github.com)",
-      "Bash(npx c8:*)",
-      "Bash(node:*)",
-      "Bash(npx mocha:*)",
-      "Bash(npm run:*)",
-      "Bash(gh issue *)",
-      "Bash(git -C /Users/matt/git/haraka/Haraka log --oneline --all)",
-      "Bash(git *)",
-      "Bash(cat)",
-      "Read(//tmp/**)",
-      "Bash(bash /tmp/check_patterns.sh)",
-      "Bash(npx prettier *)",
-      "Bash(npx eslint *)",
-      "Bash(perl -0pi -e 's/            const plugin = makePlugin\\\\\\(\\\\\\)\\\\n//g' test/plugins/prevent_credential_leaks.js)",
-      "Bash(perl -0pi -e 's/makePlugin\\\\\\(\\\\\\)\\\\./plugin./g; s/            const plugin = makePlugin\\\\\\(\\\\\\)\\\\n//g' test/plugins/process_title.js)",
-      "Bash(perl -0pi -e 's/            const plugin = makePlugin\\\\\\(\\\\\\)\\\\n//g; s/            const conn = fixtures\\\\.connection\\\\.createConnection\\\\\\(\\\\\\)\\\\n            conn\\\\.transaction = null/            conn.transaction = null/g; s/            const conn = makeConnection\\\\\\(\\\\\\)\\\\n//g' test/plugins/delay_deny.js)",
-      "Bash(gh pr *)"
-    ]
-  }
-}

package/CLAUDE.md

@@ -1,40 +0,0 @@
-This document provides foundational mandates and expert guidance. These instructions take precedence over general workflows.
-
-## Technical Standards
-
-- Consistency: Compatibiilty is important, only break it for Good Cause.
-- Research: Identify the relevant RFC(s). Analyze existing implementation and verify conformance.
-- JS features: this project targets LTS versions of Node.js and/or modern web browsers.
-  - ES2024 features should be preferred over legacy patterns.
-  - When updating files, add `node:` prefixes to any Node.js built-in `require()` calls that lack them (e.g. `require('fs')` → `require('node:fs')`)
-- Use Conventional Commit format for all commit messages.
-- Prefer for..(of|in) iterators over forEach
-- Prefer node:readline for parsing files into lines
-
-## Testing
-
-- Empirical Reproduction: For bug fixes, first create a failing test case in the corresponding test file.
-- Coverage: Every new feature MUST have a corresponding test file with high coverage.
-- Linting & Formatting: Adhere to the project's `eslint` and `prettier` configurations.
-- Migrate existing tests from mocha to `node --test`
-- when loading node:assert, load it as node:assert/strict
-
-## Tooling Commands
-
-```bash
-# Test
-npm run test                          # Run full test suite
-npm run test:coverage                 # Run tests with coverage
-node --test test/path/to/file.js      # Run a single test file (node:test packages)
-
-# Lint & Format
-npm run lint                          # Check for linting errors.
-npm run lint:fix                      # Auto-fix lint issues
-npm run prettier                      # Check formatting
-npm run prettier:fix                  # Auto-format
-npm run format                        # prettier:fix + lint:fix (run before committing)
-
-# Dependency version management
-npm run versions                      # Check for version drift
-npm run versions:fix                  # Update versions
-```

package/GEMINI.md

@@ -1,38 +0,0 @@
-This document provides foundational mandates and expert guidance. These instructions take precedence over general workflows.
-
-## Technical Standards
-- Don't change the code unless specifically asked.
-- Consistency: Compatibiilty is important, only break it for Good Cause.
-- Research: Identify the relevant RFC(s). Analyze existing implementation and verify conformance.
-- JS features: this project targets LTS versions of Node.js and/or modern web browsers. Therefore, JS2024 features should be preferred over legacy patterns.
-  - When updating files, add `node:` prefixes to any Node.js built-in `require()` calls that lack them (e.g. `require('fs')` → `require('node:fs')`)
-- Use Conventional Commit format for all commit messages.
-- Prefer for..(of|in) iterators over forEach
-- Prefer node:readline for parsing files into lines
-
-## Testing
-- Empirical Reproduction: For bug fixes, first create a failing test case in the corresponding test file.
-- Coverage: Every new feature MUST have a corresponding test file with high coverage.
-- Linting & Formatting: Adhere to the project's `eslint` and `prettier` configurations.
-- Migrate existing tests from mocha to `node --test`
-- when loading node:assert, prefer to load it as node:assert/strict
-
-## Tooling Commands
-
-```bash
-# Test
-npm run test                          # Run full test suite
-npm run test:coverage                 # Run tests with coverage
-node --test test/path/to/file.js      # Run a single test file (node:test packages)
-
-# Lint & Format
-npm run lint                          # Check for linting errors.
-npm run lint:fix                      # Auto-fix lint issues
-npm run prettier                      # Check formatting
-npm run prettier:fix                  # Auto-format
-npm run format                        # prettier:fix + lint:fix (run before committing)
-
-# Dependency version management
-npm run versions                      # Check for version drift
-npm run versions:fix                  # Update versions
-```