lurqrun 0.0.6 → 0.0.7

package/dist/index.d.ts

@@ -71,6 +71,35 @@ interface CompatConflict {
     /** The packages involved in the conflict. */
     packages: string[];
     detail: string;
+    /** The same fact as `detail`, structured, so a consumer can lay it out without
+     *  parsing prose. Present on peer-range violations; absent for engine and
+     *  sandbox conflicts, which aren't about a single declared range. */
+    requirement?: {
+        /** The peer being asked for. */
+        peer: string;
+        /** The range the requirer declares. */
+        range: string;
+        /** What the set actually resolves that peer to, when it is in the set. */
+        resolved: string | null;
+    };
+}
+/**
+ * One unordered pair among the checked members.
+ *
+ * A verdict belongs to a pair, not to a package: the same package can sit in a
+ * held pair and a conflicting one, so grading packages would either contradict
+ * itself or paint the whole set red. `held` means no declared constraint between
+ * the two was violated — it does not mean the pair was executed. Nothing here
+ * has been executed.
+ */
+interface CompatPair {
+    a: string;
+    b: string;
+    status: 'held' | 'conflict';
+    /** Only on `conflict` — the conflict's own detail string. */
+    detail?: string;
+    /** Only on `conflict`, and only for peer-range violations. */
+    requirement?: CompatConflict['requirement'];
 }
 /** One stored compat edge surfaced to agents, with its evidence class (§4B). */
 interface CompatEvidence {
@@ -78,7 +107,11 @@ interface CompatEvidence {
     versions: [string, string];
     status: CompatStatus;
     provenance: CompatProvenance;
-    /** Distinct resolved graphs an `observed` edge was witnessed in (0 otherwise). */
+    /** Distinct resolved graphs an `observed` edge was witnessed in (0 otherwise).
+     *  Only a newly-fetched closure accrues one; the daily re-mine re-reads closures
+     *  it has already counted and deliberately does not. NOTE: rows minted before
+     *  that fix carry an inflated count (one per sync run, ~16× on average) and are
+     *  only corrected by a backfill, which has not been run. */
     witnessCount: number;
 }
 /**
@@ -106,6 +139,11 @@ interface CompatOutput {
     /** Stored edges among these packages with their evidence strength (§4B) — lets
      *  agents (and metrics) see *why* a pair is called compatible, not just that. */
     evidence: CompatEvidence[];
+    /** Every unordered pair among `checked`, each with its own verdict — exactly
+     *  n(n−1)/2 entries. `conflicts` lists only what went wrong; this lists what
+     *  was compared, which is what lets a caller show coverage rather than just
+     *  failures. */
+    pairs: CompatPair[];
 }
 /** Kind of an exported symbol, from its `.d.ts` declaration. */
 type ExportKind = 'function' | 'class' | 'interface' | 'type' | 'enum' | 'variable' | 'namespace' | 'unknown';
@@ -143,6 +181,10 @@ interface UsageOutput {
      *  the README, which is already fetched). */
     surface: ExportSymbol[] | null;
     available: boolean;
+    /** Declared `engines` for this exact version (e.g. `{ node: ">=20" }`), or null
+     *  when the manifest declares none. Independent of `available` — the runtime
+     *  floor matters even for untyped packages. */
+    engines: Record<string, string> | null;
     /** Present when a `knownVersion` was supplied and both surfaces resolved. */
     delta?: SurfaceDelta & {
         fromVersion: string;
@@ -248,7 +290,7 @@ declare const SERVER_NAME = "lurq";
  *  Keep in sync with package.json "name". */
 declare const PACKAGE_NAME = "lurqrun";
 /** Keep in sync with package.json "version". */
-declare const VERSION = "0.0.6";
+declare const VERSION = "0.0.7";
 /** Default hosted endpoint the install wizard writes into agent configs. The
  *  marketing site is `lurq.run`; the MCP service lives on the `api.` subdomain.
  *  Overridable per-invocation with `lurq install --url …` or `LURQ_ENDPOINT`. */
@@ -293,6 +335,12 @@ declare const EnvSchema: z.ZodObject<{
     SUMMARY_MODEL: z.ZodDefault<z.ZodString>;
     SUMMARY_BASE_URL: z.ZodDefault<z.ZodString>;
     LURQ_SYNC_CONCURRENCY: z.ZodDefault<z.ZodNumber>;
+    /** Stalest non-seed packages the daily sync refreshes on top of the seed list.
+     *  This is the rotation rate for everything discovery ingested: index size /
+     *  this = days to come all the way around. Raise it if the sync finishes well
+     *  inside the cron window; lower it if npm starts rate-limiting. 0 disables
+     *  the rotation (seeds only, the pre-rotation behaviour). */
+    LURQ_SYNC_REFRESH_CAP: z.ZodDefault<z.ZodNumber>;
     LOG_LEVEL: z.ZodDefault<z.ZodEnum<["error", "warn", "info", "debug"]>>;
     PORT: z.ZodDefault<z.ZodNumber>;
     /** Per-API-key rate limit: max requests per window. */
@@ -307,6 +355,10 @@ declare const EnvSchema: z.ZodObject<{
      *  authenticated web app presents it to mint a key for a signed-in user. Unset
      *  → the endpoint is disabled (404). Keep it server-side, never in the client. */
     LURQ_ISSUER_SECRET: z.ZodOptional<z.ZodString>;
+    /** Numeric App ID from the GitHub App settings page. */
+    LURQ_GITHUB_APP_ID: z.ZodOptional<z.ZodString>;
+    /** PEM private key. Accepts literal newlines or `\n` escapes (Railway/Vercel). */
+    LURQ_GITHUB_APP_PRIVATE_KEY: z.ZodOptional<z.ZodString>;
     LURQ_ENDPOINT: z.ZodOptional<z.ZodString>;
     LURQ_API_KEY: z.ZodOptional<z.ZodString>;
     E2B_API_KEY: z.ZodOptional<z.ZodString>;
@@ -320,6 +372,7 @@ declare const EnvSchema: z.ZodObject<{
     SUMMARY_MODEL: string;
     SUMMARY_BASE_URL: string;
     LURQ_SYNC_CONCURRENCY: number;
+    LURQ_SYNC_REFRESH_CAP: number;
     LOG_LEVEL: "info" | "error" | "warn" | "debug";
     PORT: number;
     LURQ_RATE_LIMIT_MAX: number;
@@ -331,6 +384,8 @@ declare const EnvSchema: z.ZodObject<{
     SUMMARY_API_KEY?: string | undefined;
     LURQ_METRICS_TOKEN?: string | undefined;
     LURQ_ISSUER_SECRET?: string | undefined;
+    LURQ_GITHUB_APP_ID?: string | undefined;
+    LURQ_GITHUB_APP_PRIVATE_KEY?: string | undefined;
     LURQ_ENDPOINT?: string | undefined;
     LURQ_API_KEY?: string | undefined;
     E2B_API_KEY?: string | undefined;
@@ -348,6 +403,7 @@ declare const EnvSchema: z.ZodObject<{
     SUMMARY_MODEL?: string | undefined;
     SUMMARY_BASE_URL?: string | undefined;
     LURQ_SYNC_CONCURRENCY?: number | undefined;
+    LURQ_SYNC_REFRESH_CAP?: number | undefined;
     LOG_LEVEL?: "info" | "error" | "warn" | "debug" | undefined;
     PORT?: number | undefined;
     LURQ_RATE_LIMIT_MAX?: number | undefined;
@@ -355,6 +411,8 @@ declare const EnvSchema: z.ZodObject<{
     LURQ_RATE_LIMIT_WINDOW_MS?: number | undefined;
     LURQ_METRICS_TOKEN?: string | undefined;
     LURQ_ISSUER_SECRET?: string | undefined;
+    LURQ_GITHUB_APP_ID?: string | undefined;
+    LURQ_GITHUB_APP_PRIVATE_KEY?: string | undefined;
     LURQ_ENDPOINT?: string | undefined;
     LURQ_API_KEY?: string | undefined;
     E2B_API_KEY?: string | undefined;
@@ -390,4 +448,4 @@ declare const logger: {
 
 declare function buildProgram(): Command;
 
-export { API_KEY_PREFIX, type Advisory, type AdvisorySeverity, type BuildSignal, type BuildVerified, CACHE_TTL, CATEGORIES, type Candidate, type Category, type CategorySource, type CompatConflict, type CompatEvidence, type CompatOutput, type CompatProvenance, type CompatStatus, type Confidence, type Config, ConfigError, DEFAULT_ENDPOINT, type DependencyRanges, type DiscoverySource, type DiscoveryStatus, EMBEDDING_DIM, type EvaluateOutput, type ExportKind, type ExportSymbol, FRONTEND_CATEGORIES, PACKAGE_NAME, PROVENANCE_RANK, type PeerMeta, type RiskLevel, type Runtime, SERVER_NAME, STALENESS_DAYS, type ScoreBreakdown, type SurfaceDelta, type UsageGuide, type UsageOutput, VERSION, type VerifyOutput, buildProgram, getConfig, isCategory, isFrontendCategory, loadEnv, logger, requireConfig };
+export { API_KEY_PREFIX, type Advisory, type AdvisorySeverity, type BuildSignal, type BuildVerified, CACHE_TTL, CATEGORIES, type Candidate, type Category, type CategorySource, type CompatConflict, type CompatEvidence, type CompatOutput, type CompatPair, type CompatProvenance, type CompatStatus, type Confidence, type Config, ConfigError, DEFAULT_ENDPOINT, type DependencyRanges, type DiscoverySource, type DiscoveryStatus, EMBEDDING_DIM, type EvaluateOutput, type ExportKind, type ExportSymbol, FRONTEND_CATEGORIES, PACKAGE_NAME, PROVENANCE_RANK, type PeerMeta, type RiskLevel, type Runtime, SERVER_NAME, STALENESS_DAYS, type ScoreBreakdown, type SurfaceDelta, type UsageGuide, type UsageOutput, VERSION, type VerifyOutput, buildProgram, getConfig, isCategory, isFrontendCategory, loadEnv, logger, requireConfig };