porthawk-core 0.1.1

package/dist/index.cjs

@@ -0,0 +1,178 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  classifyOrigin: () => classifyOrigin,
+  getListeningPorts: () => getListeningPorts,
+  killProcess: () => killProcess
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/detect.ts
+var import_node_child_process = require("child_process");
+var import_node_util = require("util");
+var si = __toESM(require("systeminformation"), 1);
+
+// src/classify.ts
+var agentHostPattern = /^(code|code-oss|cursor|windsurf)(\.exe|\s.*)?$/i;
+var rules = [
+  { namePattern: /claude/i, origin: "agent" },
+  { namePattern: /^(node|python|python3|deno|bun)(\.exe)?$/i, parentPattern: agentHostPattern, origin: "agent" },
+  { namePattern: /^(bash|zsh|sh|fish|powershell|pwsh|cmd)(\.exe)?$/i, parentPattern: agentHostPattern, origin: "agent" }
+];
+function classifyOrigin(processInfo) {
+  for (const rule of rules) {
+    if (!rule.namePattern.test(processInfo.processName)) continue;
+    if (rule.parentPattern && !rule.parentPattern.test(processInfo.parentName)) continue;
+    return rule.origin;
+  }
+  return "unknown";
+}
+
+// src/detect.ts
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process.execFile);
+function isValidPid(pid) {
+  return typeof pid === "number" && Number.isInteger(pid) && pid > 0;
+}
+function normalizeProtocol(raw) {
+  return raw.toLowerCase().startsWith("udp") ? "udp" : "tcp";
+}
+async function getUnixProcessInfo(pid) {
+  const { stdout } = await execFileAsync("ps", ["-p", String(pid), "-o", "ppid=,comm=,args="]);
+  const line = stdout.trim();
+  const [ppidToken, commToken, ...rest] = line.split(/\s+/);
+  const processName = commToken ?? "";
+  const command = rest.length > 0 ? rest.join(" ") : processName;
+  const ppid = Number(ppidToken);
+  let parentName = "";
+  if (isValidPid(ppid)) {
+    try {
+      const { stdout: parentStdout } = await execFileAsync("ps", ["-p", String(ppid), "-o", "comm="]);
+      parentName = parentStdout.trim();
+    } catch {
+      parentName = "";
+    }
+  }
+  return { pid, processName, command, parentName };
+}
+async function queryWindowsProcess(pid) {
+  const script = `Get-CimInstance Win32_Process -Filter "ProcessId=${pid}" | Select-Object Name,CommandLine,ParentProcessId | ConvertTo-Json -Compress`;
+  const { stdout } = await execFileAsync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script]);
+  const trimmed = stdout.trim();
+  if (!trimmed) return void 0;
+  return JSON.parse(trimmed);
+}
+async function getWindowsProcessInfo(pid) {
+  const record = await queryWindowsProcess(pid);
+  if (!record) {
+    throw new Error(`No process found for pid ${pid}`);
+  }
+  let parentName = "";
+  if (isValidPid(record.ParentProcessId)) {
+    try {
+      const parentRecord = await queryWindowsProcess(record.ParentProcessId);
+      parentName = parentRecord?.Name ?? "";
+    } catch {
+      parentName = "";
+    }
+  }
+  return {
+    pid,
+    processName: record.Name ?? "",
+    command: record.CommandLine ?? record.Name ?? "",
+    parentName
+  };
+}
+async function getProcessInfo(pid) {
+  return process.platform === "win32" ? getWindowsProcessInfo(pid) : getUnixProcessInfo(pid);
+}
+async function getListeningPorts() {
+  const connections = await si.networkConnections();
+  const listening = connections.filter(
+    (conn) => conn.state?.toUpperCase() === "LISTEN" && isValidPid(conn.pid)
+  );
+  const processInfoByPid = /* @__PURE__ */ new Map();
+  const result = [];
+  for (const conn of listening) {
+    const pid = conn.pid;
+    if (!processInfoByPid.has(pid)) {
+      try {
+        processInfoByPid.set(pid, await getProcessInfo(pid));
+      } catch {
+        processInfoByPid.set(pid, null);
+      }
+    }
+    const processInfo = processInfoByPid.get(pid);
+    if (!processInfo) continue;
+    const port = Number(conn.localPort);
+    if (!Number.isInteger(port)) continue;
+    result.push({
+      port,
+      pid,
+      protocol: normalizeProtocol(conn.protocol),
+      processName: processInfo.processName,
+      command: processInfo.command,
+      origin: classifyOrigin(processInfo)
+    });
+  }
+  const seen = /* @__PURE__ */ new Set();
+  return result.filter((entry) => {
+    const key = `${entry.pid}:${entry.port}:${entry.protocol}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+
+// src/kill.ts
+var import_node_child_process2 = require("child_process");
+var import_node_util2 = require("util");
+var execFileAsync2 = (0, import_node_util2.promisify)(import_node_child_process2.execFile);
+function assertValidPid(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) {
+    throw new Error(`Invalid pid: ${pid}`);
+  }
+}
+async function killProcess(pid) {
+  assertValidPid(pid);
+  if (process.platform === "win32") {
+    await execFileAsync2("taskkill", ["/PID", String(pid), "/F"]);
+    return;
+  }
+  process.kill(pid);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  classifyOrigin,
+  getListeningPorts,
+  killProcess
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/detect.ts","../src/classify.ts","../src/kill.ts"],"sourcesContent":["export { getListeningPorts } from './detect.js';\nexport { killProcess } from './kill.js';\nexport { classifyOrigin } from './classify.js';\nexport type { PortInfo, ProcessInfo, Protocol, Origin, ClassifyRule } from './types.js';\n","import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport * as si from 'systeminformation';\nimport { classifyOrigin } from './classify.js';\nimport type { PortInfo, Protocol, ProcessInfo } from './types.js';\n\nconst execFileAsync = promisify(execFile);\n\nfunction isValidPid(pid: unknown): pid is number {\n  return typeof pid === 'number' && Number.isInteger(pid) && pid > 0;\n}\n\nfunction normalizeProtocol(raw: string): Protocol {\n  return raw.toLowerCase().startsWith('udp') ? 'udp' : 'tcp';\n}\n\nasync function getUnixProcessInfo(pid: number): Promise<ProcessInfo> {\n  const { stdout } = await execFileAsync('ps', ['-p', String(pid), '-o', 'ppid=,comm=,args=']);\n  const line = stdout.trim();\n  const [ppidToken, commToken, ...rest] = line.split(/\\s+/);\n  const processName = commToken ?? '';\n  const command = rest.length > 0 ? rest.join(' ') : processName;\n  const ppid = Number(ppidToken);\n\n  let parentName = '';\n  if (isValidPid(ppid)) {\n    try {\n      const { stdout: parentStdout } = await execFileAsync('ps', ['-p', String(ppid), '-o', 'comm=']);\n      parentName = parentStdout.trim();\n    } catch {\n      parentName = '';\n    }\n  }\n\n  return { pid, processName, command, parentName };\n}\n\ninterface WindowsProcessRecord {\n  Name?: string;\n  CommandLine?: string;\n  ParentProcessId?: number;\n}\n\nasync function queryWindowsProcess(pid: number): Promise<WindowsProcessRecord | undefined> {\n  const script = `Get-CimInstance Win32_Process -Filter \"ProcessId=${pid}\" | Select-Object Name,CommandLine,ParentProcessId | ConvertTo-Json -Compress`;\n  const { stdout } = await execFileAsync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script]);\n  const trimmed = stdout.trim();\n  if (!trimmed) return undefined;\n  return JSON.parse(trimmed) as WindowsProcessRecord;\n}\n\nasync function getWindowsProcessInfo(pid: number): Promise<ProcessInfo> {\n  const record = await queryWindowsProcess(pid);\n  if (!record) {\n    throw new Error(`No process found for pid ${pid}`);\n  }\n\n  let parentName = '';\n  if (isValidPid(record.ParentProcessId)) {\n    try {\n      const parentRecord = await queryWindowsProcess(record.ParentProcessId);\n      parentName = parentRecord?.Name ?? '';\n    } catch {\n      parentName = '';\n    }\n  }\n\n  return {\n    pid,\n    processName: record.Name ?? '',\n    command: record.CommandLine ?? record.Name ?? '',\n    parentName,\n  };\n}\n\nasync function getProcessInfo(pid: number): Promise<ProcessInfo> {\n  return process.platform === 'win32' ? getWindowsProcessInfo(pid) : getUnixProcessInfo(pid);\n}\n\nexport async function getListeningPorts(): Promise<PortInfo[]> {\n  const connections = await si.networkConnections();\n  const listening = connections.filter(\n    (conn) => conn.state?.toUpperCase() === 'LISTEN' && isValidPid(conn.pid),\n  );\n\n  const processInfoByPid = new Map<number, ProcessInfo | null>();\n\n  const result: PortInfo[] = [];\n\n  for (const conn of listening) {\n    const pid = conn.pid;\n\n    if (!processInfoByPid.has(pid)) {\n      try {\n        processInfoByPid.set(pid, await getProcessInfo(pid));\n      } catch {\n        processInfoByPid.set(pid, null);\n      }\n    }\n\n    const processInfo = processInfoByPid.get(pid);\n    if (!processInfo) continue;\n\n    const port = Number(conn.localPort);\n    if (!Number.isInteger(port)) continue;\n\n    result.push({\n      port,\n      pid,\n      protocol: normalizeProtocol(conn.protocol),\n      processName: processInfo.processName,\n      command: processInfo.command,\n      origin: classifyOrigin(processInfo),\n    });\n  }\n\n  const seen = new Set<string>();\n  return result.filter((entry) => {\n    const key = `${entry.pid}:${entry.port}:${entry.protocol}`;\n    if (seen.has(key)) return false;\n    seen.add(key);\n    return true;\n  });\n}\n","import type { ClassifyRule, Origin, ProcessInfo } from './types.js';\n\nconst agentHostPattern = /^(code|code-oss|cursor|windsurf)(\\.exe|\\s.*)?$/i;\n\nconst rules: ClassifyRule[] = [\n  { namePattern: /claude/i, origin: 'agent' },\n  { namePattern: /^(node|python|python3|deno|bun)(\\.exe)?$/i, parentPattern: agentHostPattern, origin: 'agent' },\n  { namePattern: /^(bash|zsh|sh|fish|powershell|pwsh|cmd)(\\.exe)?$/i, parentPattern: agentHostPattern, origin: 'agent' },\n];\n\nexport function classifyOrigin(processInfo: ProcessInfo): Origin {\n  for (const rule of rules) {\n    if (!rule.namePattern.test(processInfo.processName)) continue;\n    if (rule.parentPattern && !rule.parentPattern.test(processInfo.parentName)) continue;\n    return rule.origin;\n  }\n  return 'unknown';\n}\n","import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\n\nconst execFileAsync = promisify(execFile);\n\nfunction assertValidPid(pid: number): void {\n  if (!Number.isInteger(pid) || pid <= 0) {\n    throw new Error(`Invalid pid: ${pid}`);\n  }\n}\n\nexport async function killProcess(pid: number): Promise<void> {\n  assertValidPid(pid);\n\n  if (process.platform === 'win32') {\n    await execFileAsync('taskkill', ['/PID', String(pid), '/F']);\n    return;\n  }\n\n  process.kill(pid);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,gCAAyB;AACzB,uBAA0B;AAC1B,SAAoB;;;ACApB,IAAM,mBAAmB;AAEzB,IAAM,QAAwB;AAAA,EAC5B,EAAE,aAAa,WAAW,QAAQ,QAAQ;AAAA,EAC1C,EAAE,aAAa,6CAA6C,eAAe,kBAAkB,QAAQ,QAAQ;AAAA,EAC7G,EAAE,aAAa,qDAAqD,eAAe,kBAAkB,QAAQ,QAAQ;AACvH;AAEO,SAAS,eAAe,aAAkC;AAC/D,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,YAAY,KAAK,YAAY,WAAW,EAAG;AACrD,QAAI,KAAK,iBAAiB,CAAC,KAAK,cAAc,KAAK,YAAY,UAAU,EAAG;AAC5E,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;;;ADXA,IAAM,oBAAgB,4BAAU,kCAAQ;AAExC,SAAS,WAAW,KAA6B;AAC/C,SAAO,OAAO,QAAQ,YAAY,OAAO,UAAU,GAAG,KAAK,MAAM;AACnE;AAEA,SAAS,kBAAkB,KAAuB;AAChD,SAAO,IAAI,YAAY,EAAE,WAAW,KAAK,IAAI,QAAQ;AACvD;AAEA,eAAe,mBAAmB,KAAmC;AACnE,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,mBAAmB,CAAC;AAC3F,QAAM,OAAO,OAAO,KAAK;AACzB,QAAM,CAAC,WAAW,WAAW,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK;AACxD,QAAM,cAAc,aAAa;AACjC,QAAM,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,IAAI;AACnD,QAAM,OAAO,OAAO,SAAS;AAE7B,MAAI,aAAa;AACjB,MAAI,WAAW,IAAI,GAAG;AACpB,QAAI;AACF,YAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,cAAc,MAAM,CAAC,MAAM,OAAO,IAAI,GAAG,MAAM,OAAO,CAAC;AAC9F,mBAAa,aAAa,KAAK;AAAA,IACjC,QAAQ;AACN,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,aAAa,SAAS,WAAW;AACjD;AAQA,eAAe,oBAAoB,KAAwD;AACzF,QAAM,SAAS,oDAAoD,GAAG;AACtE,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,kBAAkB,CAAC,cAAc,mBAAmB,YAAY,MAAM,CAAC;AAC9G,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,MAAM,OAAO;AAC3B;AAEA,eAAe,sBAAsB,KAAmC;AACtE,QAAM,SAAS,MAAM,oBAAoB,GAAG;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAAA,EACnD;AAEA,MAAI,aAAa;AACjB,MAAI,WAAW,OAAO,eAAe,GAAG;AACtC,QAAI;AACF,YAAM,eAAe,MAAM,oBAAoB,OAAO,eAAe;AACrE,mBAAa,cAAc,QAAQ;AAAA,IACrC,QAAQ;AACN,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,aAAa,OAAO,QAAQ;AAAA,IAC5B,SAAS,OAAO,eAAe,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACF;AACF;AAEA,eAAe,eAAe,KAAmC;AAC/D,SAAO,QAAQ,aAAa,UAAU,sBAAsB,GAAG,IAAI,mBAAmB,GAAG;AAC3F;AAEA,eAAsB,oBAAyC;AAC7D,QAAM,cAAc,MAAS,sBAAmB;AAChD,QAAM,YAAY,YAAY;AAAA,IAC5B,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,YAAY,WAAW,KAAK,GAAG;AAAA,EACzE;AAEA,QAAM,mBAAmB,oBAAI,IAAgC;AAE7D,QAAM,SAAqB,CAAC;AAE5B,aAAW,QAAQ,WAAW;AAC5B,UAAM,MAAM,KAAK;AAEjB,QAAI,CAAC,iBAAiB,IAAI,GAAG,GAAG;AAC9B,UAAI;AACF,yBAAiB,IAAI,KAAK,MAAM,eAAe,GAAG,CAAC;AAAA,MACrD,QAAQ;AACN,yBAAiB,IAAI,KAAK,IAAI;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,cAAc,iBAAiB,IAAI,GAAG;AAC5C,QAAI,CAAC,YAAa;AAElB,UAAM,OAAO,OAAO,KAAK,SAAS;AAClC,QAAI,CAAC,OAAO,UAAU,IAAI,EAAG;AAE7B,WAAO,KAAK;AAAA,MACV;AAAA,MACA;AAAA,MACA,UAAU,kBAAkB,KAAK,QAAQ;AAAA,MACzC,aAAa,YAAY;AAAA,MACzB,SAAS,YAAY;AAAA,MACrB,QAAQ,eAAe,WAAW;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,OAAO,OAAO,CAAC,UAAU;AAC9B,UAAM,MAAM,GAAG,MAAM,GAAG,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AACxD,QAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,SAAK,IAAI,GAAG;AACZ,WAAO;AAAA,EACT,CAAC;AACH;;;AE3HA,IAAAA,6BAAyB;AACzB,IAAAC,oBAA0B;AAE1B,IAAMC,qBAAgB,6BAAU,mCAAQ;AAExC,SAAS,eAAe,KAAmB;AACzC,MAAI,CAAC,OAAO,UAAU,GAAG,KAAK,OAAO,GAAG;AACtC,UAAM,IAAI,MAAM,gBAAgB,GAAG,EAAE;AAAA,EACvC;AACF;AAEA,eAAsB,YAAY,KAA4B;AAC5D,iBAAe,GAAG;AAElB,MAAI,QAAQ,aAAa,SAAS;AAChC,UAAMA,eAAc,YAAY,CAAC,QAAQ,OAAO,GAAG,GAAG,IAAI,CAAC;AAC3D;AAAA,EACF;AAEA,UAAQ,KAAK,GAAG;AAClB;","names":["import_node_child_process","import_node_util","execFileAsync"]}

package/dist/index.d.cts

@@ -0,0 +1,29 @@
+type Protocol = 'tcp' | 'udp';
+type Origin = 'agent' | 'manual' | 'unknown';
+interface ProcessInfo {
+    pid: number;
+    processName: string;
+    command: string;
+    parentName: string;
+}
+interface PortInfo {
+    port: number;
+    pid: number;
+    protocol: Protocol;
+    processName: string;
+    command: string;
+    origin: Origin;
+}
+interface ClassifyRule {
+    namePattern: RegExp;
+    parentPattern?: RegExp;
+    origin: Origin;
+}
+
+declare function getListeningPorts(): Promise<PortInfo[]>;
+
+declare function killProcess(pid: number): Promise<void>;
+
+declare function classifyOrigin(processInfo: ProcessInfo): Origin;
+
+export { type ClassifyRule, type Origin, type PortInfo, type ProcessInfo, type Protocol, classifyOrigin, getListeningPorts, killProcess };

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+type Protocol = 'tcp' | 'udp';
+type Origin = 'agent' | 'manual' | 'unknown';
+interface ProcessInfo {
+    pid: number;
+    processName: string;
+    command: string;
+    parentName: string;
+}
+interface PortInfo {
+    port: number;
+    pid: number;
+    protocol: Protocol;
+    processName: string;
+    command: string;
+    origin: Origin;
+}
+interface ClassifyRule {
+    namePattern: RegExp;
+    parentPattern?: RegExp;
+    origin: Origin;
+}
+
+declare function getListeningPorts(): Promise<PortInfo[]>;
+
+declare function killProcess(pid: number): Promise<void>;
+
+declare function classifyOrigin(processInfo: ProcessInfo): Origin;
+
+export { type ClassifyRule, type Origin, type PortInfo, type ProcessInfo, type Protocol, classifyOrigin, getListeningPorts, killProcess };

package/dist/index.js

@@ -0,0 +1,139 @@
+// src/detect.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+import * as si from "systeminformation";
+
+// src/classify.ts
+var agentHostPattern = /^(code|code-oss|cursor|windsurf)(\.exe|\s.*)?$/i;
+var rules = [
+  { namePattern: /claude/i, origin: "agent" },
+  { namePattern: /^(node|python|python3|deno|bun)(\.exe)?$/i, parentPattern: agentHostPattern, origin: "agent" },
+  { namePattern: /^(bash|zsh|sh|fish|powershell|pwsh|cmd)(\.exe)?$/i, parentPattern: agentHostPattern, origin: "agent" }
+];
+function classifyOrigin(processInfo) {
+  for (const rule of rules) {
+    if (!rule.namePattern.test(processInfo.processName)) continue;
+    if (rule.parentPattern && !rule.parentPattern.test(processInfo.parentName)) continue;
+    return rule.origin;
+  }
+  return "unknown";
+}
+
+// src/detect.ts
+var execFileAsync = promisify(execFile);
+function isValidPid(pid) {
+  return typeof pid === "number" && Number.isInteger(pid) && pid > 0;
+}
+function normalizeProtocol(raw) {
+  return raw.toLowerCase().startsWith("udp") ? "udp" : "tcp";
+}
+async function getUnixProcessInfo(pid) {
+  const { stdout } = await execFileAsync("ps", ["-p", String(pid), "-o", "ppid=,comm=,args="]);
+  const line = stdout.trim();
+  const [ppidToken, commToken, ...rest] = line.split(/\s+/);
+  const processName = commToken ?? "";
+  const command = rest.length > 0 ? rest.join(" ") : processName;
+  const ppid = Number(ppidToken);
+  let parentName = "";
+  if (isValidPid(ppid)) {
+    try {
+      const { stdout: parentStdout } = await execFileAsync("ps", ["-p", String(ppid), "-o", "comm="]);
+      parentName = parentStdout.trim();
+    } catch {
+      parentName = "";
+    }
+  }
+  return { pid, processName, command, parentName };
+}
+async function queryWindowsProcess(pid) {
+  const script = `Get-CimInstance Win32_Process -Filter "ProcessId=${pid}" | Select-Object Name,CommandLine,ParentProcessId | ConvertTo-Json -Compress`;
+  const { stdout } = await execFileAsync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script]);
+  const trimmed = stdout.trim();
+  if (!trimmed) return void 0;
+  return JSON.parse(trimmed);
+}
+async function getWindowsProcessInfo(pid) {
+  const record = await queryWindowsProcess(pid);
+  if (!record) {
+    throw new Error(`No process found for pid ${pid}`);
+  }
+  let parentName = "";
+  if (isValidPid(record.ParentProcessId)) {
+    try {
+      const parentRecord = await queryWindowsProcess(record.ParentProcessId);
+      parentName = parentRecord?.Name ?? "";
+    } catch {
+      parentName = "";
+    }
+  }
+  return {
+    pid,
+    processName: record.Name ?? "",
+    command: record.CommandLine ?? record.Name ?? "",
+    parentName
+  };
+}
+async function getProcessInfo(pid) {
+  return process.platform === "win32" ? getWindowsProcessInfo(pid) : getUnixProcessInfo(pid);
+}
+async function getListeningPorts() {
+  const connections = await si.networkConnections();
+  const listening = connections.filter(
+    (conn) => conn.state?.toUpperCase() === "LISTEN" && isValidPid(conn.pid)
+  );
+  const processInfoByPid = /* @__PURE__ */ new Map();
+  const result = [];
+  for (const conn of listening) {
+    const pid = conn.pid;
+    if (!processInfoByPid.has(pid)) {
+      try {
+        processInfoByPid.set(pid, await getProcessInfo(pid));
+      } catch {
+        processInfoByPid.set(pid, null);
+      }
+    }
+    const processInfo = processInfoByPid.get(pid);
+    if (!processInfo) continue;
+    const port = Number(conn.localPort);
+    if (!Number.isInteger(port)) continue;
+    result.push({
+      port,
+      pid,
+      protocol: normalizeProtocol(conn.protocol),
+      processName: processInfo.processName,
+      command: processInfo.command,
+      origin: classifyOrigin(processInfo)
+    });
+  }
+  const seen = /* @__PURE__ */ new Set();
+  return result.filter((entry) => {
+    const key = `${entry.pid}:${entry.port}:${entry.protocol}`;
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+
+// src/kill.ts
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+var execFileAsync2 = promisify2(execFile2);
+function assertValidPid(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) {
+    throw new Error(`Invalid pid: ${pid}`);
+  }
+}
+async function killProcess(pid) {
+  assertValidPid(pid);
+  if (process.platform === "win32") {
+    await execFileAsync2("taskkill", ["/PID", String(pid), "/F"]);
+    return;
+  }
+  process.kill(pid);
+}
+export {
+  classifyOrigin,
+  getListeningPorts,
+  killProcess
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/detect.ts","../src/classify.ts","../src/kill.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport * as si from 'systeminformation';\nimport { classifyOrigin } from './classify.js';\nimport type { PortInfo, Protocol, ProcessInfo } from './types.js';\n\nconst execFileAsync = promisify(execFile);\n\nfunction isValidPid(pid: unknown): pid is number {\n  return typeof pid === 'number' && Number.isInteger(pid) && pid > 0;\n}\n\nfunction normalizeProtocol(raw: string): Protocol {\n  return raw.toLowerCase().startsWith('udp') ? 'udp' : 'tcp';\n}\n\nasync function getUnixProcessInfo(pid: number): Promise<ProcessInfo> {\n  const { stdout } = await execFileAsync('ps', ['-p', String(pid), '-o', 'ppid=,comm=,args=']);\n  const line = stdout.trim();\n  const [ppidToken, commToken, ...rest] = line.split(/\\s+/);\n  const processName = commToken ?? '';\n  const command = rest.length > 0 ? rest.join(' ') : processName;\n  const ppid = Number(ppidToken);\n\n  let parentName = '';\n  if (isValidPid(ppid)) {\n    try {\n      const { stdout: parentStdout } = await execFileAsync('ps', ['-p', String(ppid), '-o', 'comm=']);\n      parentName = parentStdout.trim();\n    } catch {\n      parentName = '';\n    }\n  }\n\n  return { pid, processName, command, parentName };\n}\n\ninterface WindowsProcessRecord {\n  Name?: string;\n  CommandLine?: string;\n  ParentProcessId?: number;\n}\n\nasync function queryWindowsProcess(pid: number): Promise<WindowsProcessRecord | undefined> {\n  const script = `Get-CimInstance Win32_Process -Filter \"ProcessId=${pid}\" | Select-Object Name,CommandLine,ParentProcessId | ConvertTo-Json -Compress`;\n  const { stdout } = await execFileAsync('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script]);\n  const trimmed = stdout.trim();\n  if (!trimmed) return undefined;\n  return JSON.parse(trimmed) as WindowsProcessRecord;\n}\n\nasync function getWindowsProcessInfo(pid: number): Promise<ProcessInfo> {\n  const record = await queryWindowsProcess(pid);\n  if (!record) {\n    throw new Error(`No process found for pid ${pid}`);\n  }\n\n  let parentName = '';\n  if (isValidPid(record.ParentProcessId)) {\n    try {\n      const parentRecord = await queryWindowsProcess(record.ParentProcessId);\n      parentName = parentRecord?.Name ?? '';\n    } catch {\n      parentName = '';\n    }\n  }\n\n  return {\n    pid,\n    processName: record.Name ?? '',\n    command: record.CommandLine ?? record.Name ?? '',\n    parentName,\n  };\n}\n\nasync function getProcessInfo(pid: number): Promise<ProcessInfo> {\n  return process.platform === 'win32' ? getWindowsProcessInfo(pid) : getUnixProcessInfo(pid);\n}\n\nexport async function getListeningPorts(): Promise<PortInfo[]> {\n  const connections = await si.networkConnections();\n  const listening = connections.filter(\n    (conn) => conn.state?.toUpperCase() === 'LISTEN' && isValidPid(conn.pid),\n  );\n\n  const processInfoByPid = new Map<number, ProcessInfo | null>();\n\n  const result: PortInfo[] = [];\n\n  for (const conn of listening) {\n    const pid = conn.pid;\n\n    if (!processInfoByPid.has(pid)) {\n      try {\n        processInfoByPid.set(pid, await getProcessInfo(pid));\n      } catch {\n        processInfoByPid.set(pid, null);\n      }\n    }\n\n    const processInfo = processInfoByPid.get(pid);\n    if (!processInfo) continue;\n\n    const port = Number(conn.localPort);\n    if (!Number.isInteger(port)) continue;\n\n    result.push({\n      port,\n      pid,\n      protocol: normalizeProtocol(conn.protocol),\n      processName: processInfo.processName,\n      command: processInfo.command,\n      origin: classifyOrigin(processInfo),\n    });\n  }\n\n  const seen = new Set<string>();\n  return result.filter((entry) => {\n    const key = `${entry.pid}:${entry.port}:${entry.protocol}`;\n    if (seen.has(key)) return false;\n    seen.add(key);\n    return true;\n  });\n}\n","import type { ClassifyRule, Origin, ProcessInfo } from './types.js';\n\nconst agentHostPattern = /^(code|code-oss|cursor|windsurf)(\\.exe|\\s.*)?$/i;\n\nconst rules: ClassifyRule[] = [\n  { namePattern: /claude/i, origin: 'agent' },\n  { namePattern: /^(node|python|python3|deno|bun)(\\.exe)?$/i, parentPattern: agentHostPattern, origin: 'agent' },\n  { namePattern: /^(bash|zsh|sh|fish|powershell|pwsh|cmd)(\\.exe)?$/i, parentPattern: agentHostPattern, origin: 'agent' },\n];\n\nexport function classifyOrigin(processInfo: ProcessInfo): Origin {\n  for (const rule of rules) {\n    if (!rule.namePattern.test(processInfo.processName)) continue;\n    if (rule.parentPattern && !rule.parentPattern.test(processInfo.parentName)) continue;\n    return rule.origin;\n  }\n  return 'unknown';\n}\n","import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\n\nconst execFileAsync = promisify(execFile);\n\nfunction assertValidPid(pid: number): void {\n  if (!Number.isInteger(pid) || pid <= 0) {\n    throw new Error(`Invalid pid: ${pid}`);\n  }\n}\n\nexport async function killProcess(pid: number): Promise<void> {\n  assertValidPid(pid);\n\n  if (process.platform === 'win32') {\n    await execFileAsync('taskkill', ['/PID', String(pid), '/F']);\n    return;\n  }\n\n  process.kill(pid);\n}\n"],"mappings":";AAAA,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,YAAY,QAAQ;;;ACApB,IAAM,mBAAmB;AAEzB,IAAM,QAAwB;AAAA,EAC5B,EAAE,aAAa,WAAW,QAAQ,QAAQ;AAAA,EAC1C,EAAE,aAAa,6CAA6C,eAAe,kBAAkB,QAAQ,QAAQ;AAAA,EAC7G,EAAE,aAAa,qDAAqD,eAAe,kBAAkB,QAAQ,QAAQ;AACvH;AAEO,SAAS,eAAe,aAAkC;AAC/D,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,KAAK,YAAY,KAAK,YAAY,WAAW,EAAG;AACrD,QAAI,KAAK,iBAAiB,CAAC,KAAK,cAAc,KAAK,YAAY,UAAU,EAAG;AAC5E,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;;;ADXA,IAAM,gBAAgB,UAAU,QAAQ;AAExC,SAAS,WAAW,KAA6B;AAC/C,SAAO,OAAO,QAAQ,YAAY,OAAO,UAAU,GAAG,KAAK,MAAM;AACnE;AAEA,SAAS,kBAAkB,KAAuB;AAChD,SAAO,IAAI,YAAY,EAAE,WAAW,KAAK,IAAI,QAAQ;AACvD;AAEA,eAAe,mBAAmB,KAAmC;AACnE,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,MAAM,mBAAmB,CAAC;AAC3F,QAAM,OAAO,OAAO,KAAK;AACzB,QAAM,CAAC,WAAW,WAAW,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK;AACxD,QAAM,cAAc,aAAa;AACjC,QAAM,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,IAAI;AACnD,QAAM,OAAO,OAAO,SAAS;AAE7B,MAAI,aAAa;AACjB,MAAI,WAAW,IAAI,GAAG;AACpB,QAAI;AACF,YAAM,EAAE,QAAQ,aAAa,IAAI,MAAM,cAAc,MAAM,CAAC,MAAM,OAAO,IAAI,GAAG,MAAM,OAAO,CAAC;AAC9F,mBAAa,aAAa,KAAK;AAAA,IACjC,QAAQ;AACN,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,SAAO,EAAE,KAAK,aAAa,SAAS,WAAW;AACjD;AAQA,eAAe,oBAAoB,KAAwD;AACzF,QAAM,SAAS,oDAAoD,GAAG;AACtE,QAAM,EAAE,OAAO,IAAI,MAAM,cAAc,kBAAkB,CAAC,cAAc,mBAAmB,YAAY,MAAM,CAAC;AAC9G,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,KAAK,MAAM,OAAO;AAC3B;AAEA,eAAe,sBAAsB,KAAmC;AACtE,QAAM,SAAS,MAAM,oBAAoB,GAAG;AAC5C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,4BAA4B,GAAG,EAAE;AAAA,EACnD;AAEA,MAAI,aAAa;AACjB,MAAI,WAAW,OAAO,eAAe,GAAG;AACtC,QAAI;AACF,YAAM,eAAe,MAAM,oBAAoB,OAAO,eAAe;AACrE,mBAAa,cAAc,QAAQ;AAAA,IACrC,QAAQ;AACN,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,aAAa,OAAO,QAAQ;AAAA,IAC5B,SAAS,OAAO,eAAe,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACF;AACF;AAEA,eAAe,eAAe,KAAmC;AAC/D,SAAO,QAAQ,aAAa,UAAU,sBAAsB,GAAG,IAAI,mBAAmB,GAAG;AAC3F;AAEA,eAAsB,oBAAyC;AAC7D,QAAM,cAAc,MAAS,sBAAmB;AAChD,QAAM,YAAY,YAAY;AAAA,IAC5B,CAAC,SAAS,KAAK,OAAO,YAAY,MAAM,YAAY,WAAW,KAAK,GAAG;AAAA,EACzE;AAEA,QAAM,mBAAmB,oBAAI,IAAgC;AAE7D,QAAM,SAAqB,CAAC;AAE5B,aAAW,QAAQ,WAAW;AAC5B,UAAM,MAAM,KAAK;AAEjB,QAAI,CAAC,iBAAiB,IAAI,GAAG,GAAG;AAC9B,UAAI;AACF,yBAAiB,IAAI,KAAK,MAAM,eAAe,GAAG,CAAC;AAAA,MACrD,QAAQ;AACN,yBAAiB,IAAI,KAAK,IAAI;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,cAAc,iBAAiB,IAAI,GAAG;AAC5C,QAAI,CAAC,YAAa;AAElB,UAAM,OAAO,OAAO,KAAK,SAAS;AAClC,QAAI,CAAC,OAAO,UAAU,IAAI,EAAG;AAE7B,WAAO,KAAK;AAAA,MACV;AAAA,MACA;AAAA,MACA,UAAU,kBAAkB,KAAK,QAAQ;AAAA,MACzC,aAAa,YAAY;AAAA,MACzB,SAAS,YAAY;AAAA,MACrB,QAAQ,eAAe,WAAW;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,OAAO,OAAO,CAAC,UAAU;AAC9B,UAAM,MAAM,GAAG,MAAM,GAAG,IAAI,MAAM,IAAI,IAAI,MAAM,QAAQ;AACxD,QAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,SAAK,IAAI,GAAG;AACZ,WAAO;AAAA,EACT,CAAC;AACH;;;AE3HA,SAAS,YAAAA,iBAAgB;AACzB,SAAS,aAAAC,kBAAiB;AAE1B,IAAMC,iBAAgBD,WAAUD,SAAQ;AAExC,SAAS,eAAe,KAAmB;AACzC,MAAI,CAAC,OAAO,UAAU,GAAG,KAAK,OAAO,GAAG;AACtC,UAAM,IAAI,MAAM,gBAAgB,GAAG,EAAE;AAAA,EACvC;AACF;AAEA,eAAsB,YAAY,KAA4B;AAC5D,iBAAe,GAAG;AAElB,MAAI,QAAQ,aAAa,SAAS;AAChC,UAAME,eAAc,YAAY,CAAC,QAAQ,OAAO,GAAG,GAAG,IAAI,CAAC;AAC3D;AAAA,EACF;AAEA,UAAQ,KAAK,GAAG;AAClB;","names":["execFile","promisify","execFileAsync"]}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "porthawk-core",
+  "version": "0.1.1",
+  "description": "Detection and process control engine for PortHawk",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "systeminformation": "^5.33.1"
+  },
+  "devDependencies": {
+    "@types/node": "^26.1.1",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^2.1.9"
+  },
+  "license": "MIT",
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "typecheck": "tsc --noEmit"
+  }
+}