lurqrun 0.1.8 → 0.1.9

package/dist/{server-OLTY3NYT.js → server-LROMHS62.js}

@@ -5,50 +5,50 @@ import {
   exactVersion,
   npmName,
   startMcpServer
-} from "./chunk-3676XOBU.js";
-import "./chunk-B2UUYRBX.js";
+} from "./chunk-M2CYYBAH.js";
+import "./chunk-N2NYPTRU.js";
 import "./chunk-NEZNAPPN.js";
-import "./chunk-FDFPMBCA.js";
+import "./chunk-FHRT32JH.js";
 import "./chunk-KP5ZDDPE.js";
-import "./chunk-BN3NM47Q.js";
-import "./chunk-BJT2LHAR.js";
+import "./chunk-JGIJZJ3X.js";
+import "./chunk-JJCQVOC6.js";
 import "./chunk-XLXPVN3Y.js";
-import "./chunk-P6MIKSPY.js";
+import "./chunk-2XMD4H2I.js";
 import "./chunk-D3K6IZVR.js";
 import "./chunk-6EQ3ARXA.js";
 import "./chunk-SHCEBP3J.js";
 import "./chunk-LEGPB7DO.js";
 import "./chunk-Q5VPF4WI.js";
-import "./chunk-EQCXENKZ.js";
-import "./chunk-64ZF7KO4.js";
+import "./chunk-Q7CMOU5C.js";
+import "./chunk-POHTPT37.js";
 import "./chunk-QSL6QN5X.js";
-import "./chunk-NYZU5NCW.js";
-import "./chunk-2WD4QAH4.js";
-import "./chunk-DSROTZ3Z.js";
-import "./chunk-TUXQ32WE.js";
+import "./chunk-GNNGXVCG.js";
+import "./chunk-TVOCVIM7.js";
+import "./chunk-64DPQSXV.js";
+import "./chunk-ABH4BTK4.js";
 import "./chunk-BUALU27S.js";
 import "./chunk-QUIMQ7YL.js";
 import "./chunk-6DM6UQFD.js";
-import "./chunk-EYAKM6YN.js";
-import "./chunk-D3VTZS7V.js";
+import "./chunk-KT7PWDNV.js";
+import "./chunk-XBTYJQEK.js";
 import "./chunk-4ESO33J6.js";
-import "./chunk-NPVN2THM.js";
+import "./chunk-75LMEMJ3.js";
 import "./chunk-VLRHFMGJ.js";
-import "./chunk-VGCDRK3S.js";
-import "./chunk-ONDVTXUO.js";
-import "./chunk-4JHDSVIN.js";
+import "./chunk-NGMJQBOV.js";
+import "./chunk-ZJ5XHA77.js";
+import "./chunk-6353IJJ5.js";
 import "./chunk-GM5Y555O.js";
 import "./chunk-2GAYNIHG.js";
 import "./chunk-KYKSZ3XZ.js";
-import "./chunk-A3TYI2TF.js";
+import "./chunk-SWMWVK2R.js";
 import "./chunk-HWFX4BC4.js";
-import "./chunk-6L67QMCP.js";
+import "./chunk-J3NUERU7.js";
 import "./chunk-3GHJR7XR.js";
 import "./chunk-GRJXQBQZ.js";
 import "./chunk-WHX2ZFCG.js";
 import "./chunk-LUAKDHLZ.js";
 import "./chunk-MYGSLK44.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import "./chunk-I3M2KJXB.js";
 export {
   SERVE_NEEDS_DATABASE,

package/dist/{surface-JS2XU3U3.js → surface-CZMHQLV3.js}

@@ -15,9 +15,9 @@ import {
   storeSurface,
   surfaceQueueDepth,
   surfaceRef
-} from "./chunk-ONDVTXUO.js";
-import "./chunk-4JHDSVIN.js";
-import "./chunk-72Y2FDVS.js";
+} from "./chunk-ZJ5XHA77.js";
+import "./chunk-6353IJJ5.js";
+import "./chunk-L3V7AVM6.js";
 import "./chunk-I3M2KJXB.js";
 export {
   bumpSurfaceAttempt,

package/dist/{surface-7MHE3RL7.js → surface-OH4TZR32.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-MHUEVBVO.js";
 import {
   fetchAndExtract
-} from "./chunk-FVYFV5HA.js";
+} from "./chunk-XA2SLNBR.js";
 import {
   getPackagesWithSurface
-} from "./chunk-DSROTZ3Z.js";
-import "./chunk-D3VTZS7V.js";
+} from "./chunk-64DPQSXV.js";
+import "./chunk-XBTYJQEK.js";
 import {
   getPackageVersions
-} from "./chunk-NPVN2THM.js";
+} from "./chunk-75LMEMJ3.js";
 import "./chunk-VLRHFMGJ.js";
 import {
   bumpSurfaceAttempt,
@@ -23,13 +23,13 @@ import {
   isExtractionCached,
   storeSurface,
   surfaceRef
-} from "./chunk-ONDVTXUO.js";
-import "./chunk-4JHDSVIN.js";
+} from "./chunk-ZJ5XHA77.js";
+import "./chunk-6353IJJ5.js";
 import "./chunk-KYKSZ3XZ.js";
 import {
   logger
 } from "./chunk-MYGSLK44.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";

package/dist/{surfaceHandlers-4B6TMZ34.js → surfaceHandlers-BDYRZMAC.js}

@@ -4,13 +4,13 @@ import {
   handleResolveSurface,
   loadStored,
   rowsToSurface
-} from "./chunk-BJT2LHAR.js";
+} from "./chunk-JJCQVOC6.js";
 import "./chunk-SHCEBP3J.js";
-import "./chunk-ONDVTXUO.js";
-import "./chunk-4JHDSVIN.js";
-import "./chunk-6L67QMCP.js";
+import "./chunk-ZJ5XHA77.js";
+import "./chunk-6353IJJ5.js";
+import "./chunk-J3NUERU7.js";
 import "./chunk-MYGSLK44.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import "./chunk-I3M2KJXB.js";
 export {
   handleDiffSurface,

package/dist/{uninstall-I2IJP5JZ.js → uninstall-4E5YUDQO.js}

@@ -19,7 +19,7 @@ import {
   withoutLurqHooks,
   writeFileAtomic,
   writeJson
-} from "./chunk-DM37MTOO.js";
+} from "./chunk-ETY4FSOW.js";
 import "./chunk-LUAKDHLZ.js";
 import "./chunk-MYGSLK44.js";
 import {
@@ -30,7 +30,7 @@ import {
 import {
   KEYS_URL,
   PACKAGE_NAME
-} from "./chunk-72Y2FDVS.js";
+} from "./chunk-L3V7AVM6.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";

package/dist/{upgrade-FS26DJGG.js → upgrade-S72W7JVC.js}

@@ -14,17 +14,17 @@ import {
   extractUnpacked,
   fetchManifest,
   unpackPackage
-} from "./chunk-FVYFV5HA.js";
+} from "./chunk-XA2SLNBR.js";
 import {
   resolveRuntimeEngineConflicts
 } from "./chunk-BUALU27S.js";
-import "./chunk-D3VTZS7V.js";
+import "./chunk-XBTYJQEK.js";
 import "./chunk-KYKSZ3XZ.js";
 import {
   require_semver
 } from "./chunk-3GHJR7XR.js";
 import "./chunk-MYGSLK44.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import {
   SURFACE_CLAIM_KINDS
 } from "./chunk-SHZFOSXC.js";

package/dist/{upgradePlan-ZS5IOVMZ.js → upgradePlan-F3OUNL3E.js}

@@ -1,19 +1,19 @@
 import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
 import {
   parseManifest
-} from "./chunk-TDTYV6QI.js";
+} from "./chunk-AQ6IVSFB.js";
 import "./chunk-GM5Y555O.js";
 import "./chunk-2GAYNIHG.js";
 import "./chunk-KYKSZ3XZ.js";
-import "./chunk-A3TYI2TF.js";
+import "./chunk-SWMWVK2R.js";
 import "./chunk-GRJXQBQZ.js";
 import "./chunk-WHX2ZFCG.js";
 import "./chunk-MYGSLK44.js";
 import {
   fetchUpgradePlan
-} from "./chunk-OTJFHESY.js";
+} from "./chunk-SFY5MPJE.js";
 import "./chunk-J6XQ7OPZ.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";

package/dist/{upkeepHandler-VFGYXJKB.js → upkeepHandler-7Q56A4UA.js}

@@ -1,7 +1,7 @@
 import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
 import {
   runDomains
-} from "./chunk-XBQA4I36.js";
+} from "./chunk-2LXYRDUN.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";

package/dist/{watch-OCNEUXG6.js → watch-LZPOKWCL.js}

@@ -3,30 +3,30 @@ import {
   enqueueCandidates,
   getQueuedNames,
   syncOnePackage
-} from "./chunk-TUXQ32WE.js";
+} from "./chunk-ABH4BTK4.js";
 import "./chunk-BUALU27S.js";
 import "./chunk-QUIMQ7YL.js";
 import "./chunk-6DM6UQFD.js";
-import "./chunk-EYAKM6YN.js";
-import "./chunk-D3VTZS7V.js";
+import "./chunk-KT7PWDNV.js";
+import "./chunk-XBTYJQEK.js";
 import "./chunk-4ESO33J6.js";
 import {
   getAllPackageNames
-} from "./chunk-NPVN2THM.js";
+} from "./chunk-75LMEMJ3.js";
 import "./chunk-VLRHFMGJ.js";
-import "./chunk-VGCDRK3S.js";
+import "./chunk-NGMJQBOV.js";
 import {
   enqueueSurface,
   getMcpServerNames
-} from "./chunk-ONDVTXUO.js";
+} from "./chunk-ZJ5XHA77.js";
 import {
   watchState
-} from "./chunk-4JHDSVIN.js";
+} from "./chunk-6353IJJ5.js";
 import "./chunk-GM5Y555O.js";
 import "./chunk-2GAYNIHG.js";
 import "./chunk-KYKSZ3XZ.js";
-import "./chunk-A3TYI2TF.js";
-import "./chunk-6L67QMCP.js";
+import "./chunk-SWMWVK2R.js";
+import "./chunk-J3NUERU7.js";
 import "./chunk-3GHJR7XR.js";
 import "./chunk-GRJXQBQZ.js";
 import "./chunk-WHX2ZFCG.js";
@@ -34,7 +34,7 @@ import "./chunk-LUAKDHLZ.js";
 import {
   logger
 } from "./chunk-MYGSLK44.js";
-import "./chunk-72Y2FDVS.js";
+import "./chunk-L3V7AVM6.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lurqrun",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Verify npm packages before your AI coding agent installs them: hallucinated and typosquatted names, advisories, API drift and version conflicts. MCP server, CLI and agent skill for Claude Code, Cursor and VS Code.",
   "type": "module",
   "license": "MIT",

package/dist/autopilotInit-Q62MX5M6.js

@@ -1,178 +0,0 @@
-import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
-import {
-  WORKFLOW_PATH,
-  detectInstallCommand,
-  renderWorkflow
-} from "./chunk-A3TYI2TF.js";
-import {
-  bold,
-  dim,
-  green,
-  yellow
-} from "./chunk-4KCPOMG6.js";
-import {
-  logger
-} from "./chunk-MYGSLK44.js";
-import {
-  resolveApiKey
-} from "./chunk-J6XQ7OPZ.js";
-import "./chunk-72Y2FDVS.js";
-import {
-  init_esm_shims
-} from "./chunk-I3M2KJXB.js";
-
-// src/cli/autopilotInit.ts
-init_esm_shims();
-import { spawnSync } from "child_process";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
-var LOCKFILES = ["package-lock.json", "yarn.lock", "pnpm-lock.yaml", "bun.lockb", "bun.lock"];
-function parseRepoFromRemote(url) {
-  const trimmed = url.trim().replace(/\.git$/, "");
-  if (!trimmed) return null;
-  const match = (
-    // git@github.com:owner/name  |  ssh://git@github.com/owner/name
-    trimmed.match(/^(?:ssh:\/\/)?git@[^:/]+[:/]([^/]+)\/([^/]+)$/) ?? // https://github.com/owner/name
-    trimmed.match(/^https?:\/\/[^/]+\/([^/]+)\/([^/]+)$/)
-  );
-  if (!match) return null;
-  const [, owner, name] = match;
-  return owner && name ? `${owner}/${name}` : null;
-}
-function needsAgentCredential(mode) {
-  return mode === "pr";
-}
-function parseMode(raw) {
-  if (!raw) return "fix";
-  if (raw === "comment" || raw === "fix" || raw === "pr") return raw;
-  throw new Error(`Unknown mode "${raw}". Use comment, fix, or pr.`);
-}
-function run(cmd, args, cwd) {
-  return spawnSync(cmd, args, { cwd, encoding: "utf8" });
-}
-function have(cmd) {
-  const res = run(cmd, ["--version"]);
-  return res.status === 0;
-}
-function setSecret(repo, name, value) {
-  const res = spawnSync("gh", ["secret", "set", name, "--repo", repo], {
-    input: value,
-    encoding: "utf8"
-  });
-  if (res.status !== 0) {
-    logger.error(`  could not set ${name}: ${(res.stderr || res.stdout || "").trim()}`);
-    return false;
-  }
-  return true;
-}
-function mintClaudeToken() {
-  const res = spawnSync("claude", ["setup-token"], {
-    stdio: ["inherit", "pipe", "inherit"],
-    encoding: "utf8"
-  });
-  if (res.status !== 0) return null;
-  const lines = (res.stdout ?? "").split("\n").map((l) => l.trim()).filter(Boolean);
-  const token = lines[lines.length - 1];
-  if (!token || token.includes(" ") || token.length < 20) return null;
-  return token;
-}
-async function runAutopilotInit(opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  const mode = parseMode(opts.mode);
-  const done = [];
-  const todo = [];
-  let repo = opts.repo?.trim();
-  if (!repo) {
-    const remote = run("git", ["remote", "get-url", "origin"], cwd);
-    repo = remote.status === 0 && parseRepoFromRemote(remote.stdout) || void 0;
-  }
-  if (!repo) {
-    logger.error("Could not work out which repository this is.");
-    logger.error("Pass it: lurq autopilot init --repo owner/name");
-    process.exitCode = 1;
-    return;
-  }
-  const apiKey = resolveApiKey(opts.apiKey);
-  if (!apiKey) {
-    logger.error("No lurq API key on this machine. Run `lurq setup` first, then this again.");
-    process.exitCode = 1;
-    return;
-  }
-  if (!have("gh")) {
-    logger.error("The GitHub CLI (`gh`) is not installed. https://cli.github.com");
-    process.exitCode = 1;
-    return;
-  }
-  if (run("gh", ["auth", "status"]).status !== 0) {
-    logger.error("`gh` is not signed in. Run `gh auth login`, then this again.");
-    process.exitCode = 1;
-    return;
-  }
-  logger.info(`${bold("repository")}  ${repo}`);
-  logger.info(`${bold("mode")}        ${mode}
-`);
-  if (setSecret(repo, "LURQ_API_KEY", apiKey)) done.push("LURQ_API_KEY set as a repository secret");
-  else {
-    process.exitCode = 1;
-    return;
-  }
-  const path = join(cwd, WORKFLOW_PATH);
-  if (existsSync(path) && !opts.force) {
-    done.push(`${WORKFLOW_PATH} already exists (left alone; --force overwrites)`);
-  } else {
-    const lockfiles = LOCKFILES.filter((f) => existsSync(join(cwd, f)));
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, renderWorkflow({ mode, installCommand: detectInstallCommand(lockfiles) }));
-    done.push(`${WORKFLOW_PATH} written`);
-  }
-  if (needsAgentCredential(mode) && opts.credential !== false) {
-    if (!have("claude")) {
-      todo.push(
-        `Set ANTHROPIC_API_KEY (from the Anthropic console) as a repository secret \u2014 pr mode fails without a credential:
-    gh secret set ANTHROPIC_API_KEY --repo ${repo}`
-      );
-    } else {
-      logger.info(dim("Minting a Claude token \u2014 sign in when prompted."));
-      const token = mintClaudeToken();
-      if (token && setSecret(repo, "CLAUDE_CODE_OAUTH_TOKEN", token)) {
-        done.push("CLAUDE_CODE_OAUTH_TOKEN set as a repository secret");
-        todo.push(
-          yellow("That token expires one year from today, with no warning.") + " This is a scheduled job, so it will work for a year and then stop.\n    An ANTHROPIC_API_KEY from the console does not expire, and is the right one if anyone else maintains this repo."
-        );
-      } else {
-        todo.push(
-          `Could not read a token back from \`claude setup-token\`. Set one by hand:
-    claude setup-token
-    gh secret set CLAUDE_CODE_OAUTH_TOKEN --repo ${repo}`
-        );
-      }
-    }
-  }
-  todo.push(
-    `Read the workflow, then commit it \u2014 that commit is what grants write access:
-    git add ${WORKFLOW_PATH} && git commit -m "ci: lurq upgrade autopilot" && git push`
-  );
-  if (opts.json) {
-    logger.info(JSON.stringify({ repo, mode, done, todo: todo.length }, null, 2));
-    return;
-  }
-  logger.info("");
-  for (const line of done) logger.info(`${green("\u2713")} ${line}`);
-  logger.info(`
-${bold("Next")}`);
-  for (const line of todo) logger.info(`  \xB7 ${line}`);
-}
-function workflowExists(cwd) {
-  return existsSync(join(cwd, WORKFLOW_PATH));
-}
-function readWorkflow(cwd) {
-  const path = join(cwd, WORKFLOW_PATH);
-  return existsSync(path) ? readFileSync(path, "utf8") : null;
-}
-export {
-  needsAgentCredential,
-  parseRepoFromRemote,
-  readWorkflow,
-  runAutopilotInit,
-  workflowExists
-};