pnpm-audit-hook 1.0.0

package/dist/static-db/types.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Static Vulnerability Database Types
+ *
+ * Schema for storing historical npm vulnerabilities (2020-2025) in a static,
+ * file-based database optimized for fast lookups and efficient storage.
+ */
+import type { Severity, VulnerabilityIdentifier, FindingSource } from "../types";
+/**
+ * Represents a single affected version range for a vulnerability.
+ * Stored compactly to minimize duplication across packages.
+ */
+export interface AffectedVersionRange {
+    /** Semver range (e.g., ">=1.0.0 <1.2.6", "<2.0.0") */
+    range: string;
+    /** First patched version, if known */
+    fixed?: string;
+}
+/**
+ * A single vulnerability entry in the static database.
+ * Compatible with VulnerabilityFinding from src/types.ts.
+ */
+export interface StaticVulnerability {
+    /** Canonical vulnerability ID (e.g., CVE-2021-44228, GHSA-xxxx-xxxx-xxxx) */
+    id: string;
+    /** Package name this vulnerability affects */
+    packageName: string;
+    /** Severity level */
+    severity: Severity;
+    /** ISO date string when vulnerability was published */
+    publishedAt?: string;
+    /** ISO date string when vulnerability was last modified */
+    modifiedAt?: string;
+    /** Affected version ranges for this package */
+    affectedVersions: AffectedVersionRange[];
+    /** Original data source */
+    source: FindingSource;
+    /** Human-readable title/summary */
+    title?: string;
+    /** URL for more information */
+    url?: string;
+    /** Description of the vulnerability */
+    description?: string;
+    /** Additional identifiers (CVE, GHSA, etc.) */
+    identifiers?: VulnerabilityIdentifier[];
+}
+/**
+ * Package vulnerability file structure.
+ * Stored as: data/{package-name}.json (scoped: data/@scope/package.json)
+ */
+export interface StaticPackageData {
+    /** Package name (for validation) */
+    packageName: string;
+    /** ISO date string when this package's data was last updated */
+    lastUpdated: string;
+    /** List of vulnerabilities affecting this package, sorted by publishedAt desc */
+    vulnerabilities: StaticVulnerability[];
+}
+/**
+ * Alias for StaticPackageData - used by optimizer for expanded format.
+ * A single package shard file containing all vulnerabilities for one package.
+ */
+export interface PackageShard {
+    /** Package name (for validation) */
+    packageName: string;
+    /** ISO date string when this shard was last updated */
+    lastUpdated: string;
+    /** All vulnerabilities affecting this package, sorted by publishedAt desc */
+    vulnerabilities: StaticVulnerability[];
+}
+/**
+ * Entry in the package index for quick existence checks and filtering.
+ */
+export interface PackageIndexEntry {
+    /** Number of known vulnerabilities for this package */
+    count: number;
+    /** ISO date string of most recent vulnerability */
+    latestVuln?: string;
+    /** Highest severity among all vulnerabilities */
+    maxSeverity: Severity;
+}
+/**
+ * Main index file containing metadata and package listing.
+ * Stored as: data/index.json
+ */
+export interface StaticDbIndex {
+    /** Schema version for forward compatibility */
+    schemaVersion: number;
+    /** ISO date string when the database was last built */
+    lastUpdated: string;
+    /** ISO date string - vulnerabilities published before this date are included */
+    cutoffDate: string;
+    /** Total number of vulnerabilities in the database */
+    totalVulnerabilities: number;
+    /** Total number of packages with vulnerabilities */
+    totalPackages: number;
+    /**
+     * Map of package names to their index entries.
+     * Enables O(1) lookup to check if a package has known vulnerabilities.
+     */
+    packages: Record<string, PackageIndexEntry>;
+    /** Build metadata (optional) */
+    buildInfo?: {
+        /** Tool/script that generated this database */
+        generator?: string;
+        /** Source databases used (e.g., ["github-advisory"]) */
+        sources?: string[];
+        /** Build duration in milliseconds */
+        durationMs?: number;
+    };
+}
+/**
+ * Query options for looking up vulnerabilities.
+ */
+export interface StaticDbQueryOptions {
+    /** Only return vulnerabilities published after this ISO date */
+    publishedAfter?: string;
+    /** Only return vulnerabilities published before this ISO date */
+    publishedBefore?: string;
+    /** Filter by minimum severity level */
+    minSeverity?: Severity;
+    /** Specific package version to match against affected ranges */
+    version?: string;
+}
+/**
+ * Result from a static database query.
+ */
+export interface StaticDbQueryResult {
+    /** Matching vulnerabilities */
+    vulnerabilities: StaticVulnerability[];
+    /** Whether the package was found in the index */
+    found: boolean;
+    /** Time to execute query in milliseconds */
+    durationMs: number;
+}
+export { severityRank as severityLevel } from "../utils/severity";
+//# sourceMappingURL=types.d.ts.map

package/dist/static-db/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/static-db/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAMjF;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;IACzC,2BAA2B;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,uBAAuB,EAAE,CAAC;CACzC;AAMD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,eAAe,EAAE,mBAAmB,EAAE,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,eAAe,EAAE,mBAAmB,EAAE,CAAC;CACxC;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,WAAW,EAAE,QAAQ,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC5C,gCAAgC;IAChC,SAAS,CAAC,EAAE;QACV,+CAA+C;QAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,wDAAwD;QACxD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,qCAAqC;QACrC,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,eAAe,EAAE,mBAAmB,EAAE,CAAC;IACvC,iDAAiD;IACjD,KAAK,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,OAAO,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/static-db/types.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Static Vulnerability Database Types
+ *
+ * Schema for storing historical npm vulnerabilities (2020-2025) in a static,
+ * file-based database optimized for fast lookups and efficient storage.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.severityLevel = void 0;
+// Re-export severity utilities from the canonical location
+var severity_1 = require("../utils/severity");
+Object.defineProperty(exports, "severityLevel", { enumerable: true, get: function () { return severity_1.severityRank; } });
+//# sourceMappingURL=types.js.map

package/dist/static-db/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/static-db/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA2JH,2DAA2D;AAC3D,8CAAkE;AAAzD,yGAAA,YAAY,OAAiB"}

package/dist/types.d.ts

@@ -0,0 +1,175 @@
+export type Severity = "critical" | "high" | "medium" | "low" | "unknown";
+export type FindingSource = "github" | "nvd";
+export type PolicyAction = "allow" | "warn" | "block";
+export type DecisionSource = "severity" | "source" | "allowlist";
+export type VulnerabilityIdType = "CVE" | "GHSA" | "OSV" | "OTHER";
+/** Resolution info for a lockfile package entry */
+export interface LockfileResolution {
+    type?: string;
+    directory?: string;
+    path?: string;
+    tarball?: string;
+    integrity?: string;
+}
+/** A package entry in pnpm lockfile packages section */
+export interface LockfilePackageEntry {
+    resolution?: LockfileResolution;
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    optionalDependencies?: Record<string, string>;
+    peerDependencies?: Record<string, string>;
+}
+/** An importer entry (workspace root or workspace package) */
+export interface LockfileImporter {
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    optionalDependencies?: Record<string, string>;
+    specifiers?: Record<string, string>;
+}
+/** Pnpm lockfile structure passed to hooks */
+export interface PnpmLockfile {
+    lockfileVersion?: string | number;
+    packages?: Record<string, LockfilePackageEntry>;
+    importers?: Record<string, LockfileImporter>;
+}
+/** Context provided by pnpm to hook functions */
+export interface PnpmHookContext {
+    lockfileDir?: string;
+    storeDir?: string;
+    registries?: Record<string, string>;
+}
+interface AllowlistEntryBase {
+    version?: string;
+    reason?: string;
+    expires?: string;
+}
+interface AllowlistEntryById extends AllowlistEntryBase {
+    id: string;
+    package?: string;
+}
+interface AllowlistEntryByPackage extends AllowlistEntryBase {
+    id?: string;
+    package: string;
+}
+export type AllowlistEntry = AllowlistEntryById | AllowlistEntryByPackage;
+export interface PackageRef {
+    name: string;
+    version: string;
+    direct?: boolean;
+}
+export interface VulnerabilityIdentifier {
+    type: VulnerabilityIdType;
+    value: string;
+}
+export interface VulnerabilityFinding {
+    id: string;
+    source: FindingSource;
+    packageName: string;
+    packageVersion: string;
+    title?: string;
+    url?: string;
+    description?: string;
+    severity: Severity;
+    publishedAt?: string;
+    modifiedAt?: string;
+    identifiers?: VulnerabilityIdentifier[];
+    affectedRange?: string;
+    fixedVersion?: string;
+}
+export interface PolicyDecision {
+    action: PolicyAction;
+    reason: string;
+    source: DecisionSource;
+    at: string;
+    findingId?: string;
+    packageName?: string;
+    packageVersion?: string;
+}
+export interface PackageAuditResult {
+    pkg: PackageRef;
+    findings: VulnerabilityFinding[];
+    decisions: PolicyDecision[];
+}
+export interface SourceStatus {
+    ok: boolean;
+    error?: string;
+    durationMs?: number;
+}
+/** User-provided config (all fields optional, merged with defaults) */
+export interface AuditConfigInput {
+    policy?: {
+        block?: Severity[];
+        warn?: Severity[];
+        allowlist?: AllowlistEntry[];
+    };
+    sources?: {
+        github?: boolean | {
+            enabled?: boolean;
+        };
+        nvd?: boolean | {
+            enabled?: boolean;
+        };
+    };
+    performance?: {
+        timeoutMs?: number;
+    };
+    cache?: {
+        ttlSeconds?: number;
+    };
+    /** Block installation when all sources are disabled (default: true for security) */
+    failOnNoSources?: boolean;
+    /** Block installation when a source fails (default: true for security) */
+    failOnSourceError?: boolean;
+    /** Static baseline configuration for historical vulnerabilities */
+    staticBaseline?: StaticBaselineConfigInput;
+}
+/** Fully-resolved config returned by loadConfig() */
+export interface AuditConfig {
+    policy: {
+        block: Severity[];
+        warn: Severity[];
+        allowlist: AllowlistEntry[];
+    };
+    sources: {
+        github: {
+            enabled: boolean;
+        };
+        nvd: {
+            enabled: boolean;
+        };
+    };
+    performance: {
+        timeoutMs: number;
+    };
+    cache: {
+        ttlSeconds: number;
+    };
+    /** Block installation when all sources are disabled (default: true for security) */
+    failOnNoSources: boolean;
+    /** Block installation when a source fails (default: true for security) */
+    failOnSourceError: boolean;
+    /** Static baseline configuration for historical vulnerabilities */
+    staticBaseline: StaticBaselineConfig;
+}
+export interface RuntimeOptions {
+    cwd: string;
+    registryUrl: string;
+    env: Record<string, string | undefined>;
+}
+/** Configuration for static vulnerability baseline */
+export interface StaticBaselineConfig {
+    /** Enable/disable static baseline (default: true) */
+    enabled: boolean;
+    /** Vulnerabilities before this date use static DB (ISO date string) */
+    cutoffDate: string;
+    /** Optional custom path to static data directory */
+    dataPath?: string;
+}
+/** User-provided static baseline config (all fields optional) */
+export interface StaticBaselineConfigInput {
+    enabled?: boolean;
+    cutoffDate?: string;
+    dataPath?: string;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAC1E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,KAAK,CAAC;AAC7C,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AACtD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;AACjE,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEnE,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC9C;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,UAAU,kBAAkB;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,kBAAmB,SAAQ,kBAAkB;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,uBAAwB,SAAQ,kBAAkB;IAC1D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,uBAAuB,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,uBAAuB,EAAE,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,UAAU,CAAC;IAChB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;IACjC,SAAS,EAAE,cAAc,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;QAClB,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;KAC9B,CAAC;IACF,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,OAAO,GAAG;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QACzC,GAAG,CAAC,EAAE,OAAO,GAAG;YAAE,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KACvC,CAAC;IACF,WAAW,CAAC,EAAE;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mEAAmE;IACnE,cAAc,CAAC,EAAE,yBAAyB,CAAC;CAC5C;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ,EAAE,CAAC;QAClB,IAAI,EAAE,QAAQ,EAAE,CAAC;QACjB,SAAS,EAAE,cAAc,EAAE,CAAC;KAC7B,CAAC;IACF,OAAO,EAAE;QACP,MAAM,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;QAC7B,GAAG,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC;KAC3B,CAAC;IACF,WAAW,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;IACzB,0EAA0E;IAC1E,iBAAiB,EAAE,OAAO,CAAC;IAC3B,mEAAmE;IACnE,cAAc,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACzC;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,qDAAqD;IACrD,OAAO,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/concurrency.d.ts

@@ -0,0 +1,2 @@
+export declare function mapWithConcurrency<T, R>(items: readonly T[], limit: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;
+//# sourceMappingURL=concurrency.d.ts.map

package/dist/utils/concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../../src/utils/concurrency.ts"],"names":[],"mappings":"AAAA,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,CAAC,EAC3C,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACzC,OAAO,CAAC,CAAC,EAAE,CAAC,CAoBd"}

package/dist/utils/concurrency.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapWithConcurrency = mapWithConcurrency;
+async function mapWithConcurrency(items, limit, fn) {
+    if (!Number.isFinite(limit) || limit <= 0) {
+        throw new Error(`Invalid concurrency limit: ${limit}`);
+    }
+    if (items.length === 0)
+        return [];
+    const results = new Array(items.length);
+    let nextIndex = 0;
+    const workerCount = Math.min(limit, items.length);
+    const workers = Array.from({ length: workerCount }, async () => {
+        while (true) {
+            const i = nextIndex++;
+            if (i >= items.length)
+                break;
+            results[i] = await fn(items[i], i);
+        }
+    });
+    await Promise.all(workers);
+    return results;
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/utils/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../../src/utils/concurrency.ts"],"names":[],"mappings":";;AAAA,gDAwBC;AAxBM,KAAK,UAAU,kBAAkB,CACtC,KAAmB,EACnB,KAAa,EACb,EAA0C;IAE1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAElC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,IAAI,EAAE;QAC7D,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM;YAC7B,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/utils/cvss.d.ts

@@ -0,0 +1,4 @@
+import type { Severity } from "../types";
+/** Convert CVSS v3.x vector string to severity. Returns "unknown" if parsing fails. */
+export declare function cvssV3VectorToSeverity(vector: string): Severity;
+//# sourceMappingURL=cvss.d.ts.map

package/dist/utils/cvss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cvss.d.ts","sourceRoot":"","sources":["../../src/utils/cvss.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAkC/D"}

package/dist/utils/cvss.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cvssV3VectorToSeverity = cvssV3VectorToSeverity;
+/** Convert CVSS v3.x vector string to severity. Returns "unknown" if parsing fails. */
+function cvssV3VectorToSeverity(vector) {
+    const v = vector.trim();
+    if (!v.startsWith("CVSS:3."))
+        return "unknown";
+    const metrics = {};
+    for (const p of v.split("/").slice(1)) {
+        const [k, val] = p.split(":");
+        if (k && val)
+            metrics[k] = val;
+    }
+    const AV = { N: 0.85, A: 0.62, L: 0.55, P: 0.2 }[metrics.AV];
+    const AC = { L: 0.77, H: 0.44 }[metrics.AC];
+    const UI = { N: 0.85, R: 0.62 }[metrics.UI];
+    const S = metrics.S;
+    const C = { H: 0.56, L: 0.22, N: 0.0 }[metrics.C];
+    const I = { H: 0.56, L: 0.22, N: 0.0 }[metrics.I];
+    const A = { H: 0.56, L: 0.22, N: 0.0 }[metrics.A];
+    if (AV == null || AC == null || UI == null || S == null || C == null || I == null || A == null)
+        return "unknown";
+    const PR = (S === "U" ? { N: 0.85, L: 0.62, H: 0.27 } : { N: 0.85, L: 0.68, H: 0.5 })[metrics.PR];
+    if (PR == null)
+        return "unknown";
+    const exploitability = 8.22 * AV * AC * PR * UI;
+    const iscBase = 1 - (1 - C) * (1 - I) * (1 - A);
+    const impact = S === "U" ? 6.42 * iscBase : 7.52 * (iscBase - 0.029) - 3.25 * Math.pow(iscBase - 0.02, 15);
+    if (impact <= 0)
+        return "unknown";
+    const score = Math.ceil((Math.min(S === "U" ? impact + exploitability : 1.08 * (impact + exploitability), 10) + 1e-10) * 10) / 10;
+    if (score >= 9.0)
+        return "critical";
+    if (score >= 7.0)
+        return "high";
+    if (score >= 4.0)
+        return "medium";
+    return score > 0 ? "low" : "unknown";
+}
+//# sourceMappingURL=cvss.js.map

package/dist/utils/cvss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cvss.js","sourceRoot":"","sources":["../../src/utils/cvss.ts"],"names":[],"mappings":";;AAGA,wDAkCC;AAnCD,uFAAuF;AACvF,SAAgB,sBAAsB,CAAC,MAAc;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAE/C,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACjC,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAA2B,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAe,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAe,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,OAAO,CAAC,CAA0B,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAoB,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAoB,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAoB,CAAC,CAAC;IAErE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAEjH,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAqB,CAAC,CAAC;IACrH,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC;IAE3G,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IAElI,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC;IAClC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC"}

package/dist/utils/env.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Get npm registry URL from env.
+ * For security, throws an error if an explicitly configured URL is invalid.
+ * Only falls back to default when no registry is explicitly configured.
+ */
+export declare function getRegistryUrl(env: Record<string, string | undefined>): string;
+//# sourceMappingURL=env.d.ts.map

package/dist/utils/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CA2B9E"}

package/dist/utils/env.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRegistryUrl = getRegistryUrl;
+const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
+/**
+ * Get npm registry URL from env.
+ * For security, throws an error if an explicitly configured URL is invalid.
+ * Only falls back to default when no registry is explicitly configured.
+ */
+function getRegistryUrl(env) {
+    const explicitReg = env.PNPM_REGISTRY || env.npm_config_registry || env.NPM_CONFIG_REGISTRY;
+    // No explicit config - use default
+    if (!explicitReg) {
+        return DEFAULT_REGISTRY;
+    }
+    // Validate explicitly configured URL
+    let parsed;
+    try {
+        parsed = new URL(explicitReg);
+    }
+    catch {
+        throw new Error(`Invalid registry URL configured: "${explicitReg}". ` +
+            `Please fix the registry URL or unset PNPM_REGISTRY/npm_config_registry/NPM_CONFIG_REGISTRY.`);
+    }
+    if (!["http:", "https:"].includes(parsed.protocol)) {
+        throw new Error(`Invalid registry protocol "${parsed.protocol}" in URL: "${explicitReg}". ` +
+            `Only http: and https: are allowed.`);
+    }
+    return explicitReg.endsWith("/") ? explicitReg : `${explicitReg}/`;
+}
+// No extra helpers needed here (keep this file minimal).
+//# sourceMappingURL=env.js.map

package/dist/utils/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":";;AAOA,wCA2BC;AAlCD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAEvD;;;;GAIG;AACH,SAAgB,cAAc,CAAC,GAAuC;IACpE,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,mBAAmB,CAAC;IAE5F,mCAAmC;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qCAAqC,WAAW,KAAK;YACnD,6FAA6F,CAChG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,8BAA8B,MAAM,CAAC,QAAQ,cAAc,WAAW,KAAK;YACzE,oCAAoC,CACvC,CAAC;IACJ,CAAC;IAED,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC;AACrE,CAAC;AAED,yDAAyD"}

package/dist/utils/error.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Extract error message from unknown error type.
+ * Common pattern for catch blocks.
+ */
+export declare const errorMessage: (e: unknown) => string;
+//# sourceMappingURL=error.d.ts.map

package/dist/utils/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,GAAG,OAAO,KAAG,MACE,CAAC"}

package/dist/utils/error.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorMessage = void 0;
+/**
+ * Extract error message from unknown error type.
+ * Common pattern for catch blocks.
+ */
+const errorMessage = (e) => e instanceof Error ? e.message : String(e);
+exports.errorMessage = errorMessage;
+//# sourceMappingURL=error.js.map

package/dist/utils/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/utils/error.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACI,MAAM,YAAY,GAAG,CAAC,CAAU,EAAU,EAAE,CACjD,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AADhC,QAAA,YAAY,gBACoB"}

package/dist/utils/hash.d.ts

@@ -0,0 +1,2 @@
+export declare const sha256Hex: (input: string) => string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/utils/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,WACkB,CAAC"}

package/dist/utils/hash.js

@@ -0,0 +1,10 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Hex = void 0;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const sha256Hex = (input) => node_crypto_1.default.createHash("sha256").update(input).digest("hex");
+exports.sha256Hex = sha256Hex;
+//# sourceMappingURL=hash.js.map

package/dist/utils/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAiC;AAE1B,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CACzC,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAD7C,QAAA,SAAS,aACoC"}

package/dist/utils/http.d.ts

@@ -0,0 +1,33 @@
+export declare const sleep: (ms: number) => Promise<void>;
+export declare function retry<T>(fn: () => Promise<T>, retries: number, shouldRetry: (err: unknown) => boolean): Promise<T>;
+export declare class HttpError extends Error {
+    readonly status?: number;
+    readonly url: string;
+    readonly retryAfter?: string | number;
+    readonly responseText?: string;
+    constructor(message: string, opts: {
+        url: string;
+        status?: number;
+        retryAfter?: string | number;
+        responseText?: string;
+    });
+}
+export interface HttpClientOptions {
+    timeoutMs: number;
+    userAgent: string;
+    headers?: Record<string, string>;
+    retries?: number;
+}
+export declare class HttpClient {
+    private readonly timeoutMs;
+    private readonly userAgent;
+    private readonly headers;
+    private readonly retries;
+    constructor(opts: HttpClientOptions);
+    getJson: <T>(url: string, extraHeaders?: Record<string, string>) => Promise<T>;
+    postJson: <T>(url: string, body: unknown, extraHeaders?: Record<string, string>) => Promise<T>;
+    getRaw: (url: string, extraHeaders?: Record<string, string>) => Promise<Response>;
+    private requestRaw;
+    private requestJson;
+}
+//# sourceMappingURL=http.d.ts.map

package/dist/utils/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/utils/http.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,KAAK,GAAI,IAAI,MAAM,kBAAgD,CAAC;AAEjF,wBAAsB,KAAK,CAAC,CAAC,EAC3B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,GACrC,OAAO,CAAC,CAAC,CAAC,CAgBZ;AAED,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAG7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE;CAS9F;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,EAAE,iBAAiB;IAOnC,OAAO,GAAI,CAAC,EAAE,KAAK,MAAM,EAAE,eAAe,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,gBACL;IAE3D,QAAQ,GAAI,CAAC,EAAE,KAAK,MAAM,EAAE,MAAM,OAAO,EAAE,eAAe,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,gBACzB;IAEvD,MAAM,GAAI,KAAK,MAAM,EAAE,eAAe,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,uBACL;YAEzC,UAAU;YAiEV,WAAW;CAsB1B"}