publishport-opencli 1.8.5-pp.2 → 1.8.5-pp.21

package/clis/oschina/whoami.js

@@ -1,35 +1 @@
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { checkLogin, cookieQuickCheck } from '../_shared/article/auth.js';
-import { oschinaProfile } from './article.js';
-
-// 取当前开源中国登录账号（共用 article.js 导出的 oschinaProfile.home + oschinaProfile.checkAuth）。
-const authProfile = {
-    home: oschinaProfile.home,
-    checkAuth: oschinaProfile.checkAuth,
-};
-
-cli({
-    site: 'oschina',
-    name: 'whoami',
-    access: 'read',
-    description: '查询当前开源中国登录账号信息（登录状态 / 用户 ID / 用户名）。',
-    domain: 'my.oschina.net',
-    strategy: Strategy.COOKIE,
-    browser: true,
-    columns: ['logged_in', 'user_id', 'username'],
-    // 快速登录检测（`auth status` quick / 桌面 GUI 用）：开源中国登录态由 oscid
-    // 承载（实测：去掉它鉴权接口翻匿名），cookie 写在 .oschina.net 顶域。
-    authStatus: {
-        quickCheck: cookieQuickCheck('https://my.oschina.net', ['oscid']),
-    },
-    func: async (page) => {
-        const r = await checkLogin(page, authProfile);
-        return [
-            {
-                logged_in: r.isAuthenticated,
-                user_id: r.userId || '',
-                username: r.username || '',
-            },
-        ];
-    },
-});
+import{cli as v,Strategy as x}from"@jackwener/opencli/registry";import{checkLogin as z,cookieQuickCheck as A}from"../_shared/article/auth.js";import{oschinaProfile as m}from"./article.js";const B={home:m.home,checkAuth:m.checkAuth};v({site:"oschina",name:"whoami",access:"read",description:"查询当前开源中国登录账号信息（登录状态 / 用户 ID / 用户名）。",domain:"my.oschina.net",strategy:x.COOKIE,browser:!0,columns:["logged_in","user_id","username"],authStatus:{quickCheck:A("https://my.oschina.net",["oscid"])},func:async(q)=>{const b=await z(q,B);return[{logged_in:b.isAuthenticated,user_id:b.userId||"",username:b.username||""}]}});

package/clis/osv/query.js

@@ -1,72 +1 @@
-// osv query — find vulnerabilities affecting a given package (and optional version).
-//
-// Hits `POST https://api.osv.dev/v1/query` with `{package:{name,ecosystem}, version?}`.
-// Returns one row per vulnerability ranked by published date (newest first), so
-// agents can answer "is package X@Y vulnerable?" in one shot.
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { EmptyResultError } from '@jackwener/opencli/errors';
-import {
-    OSV_BASE, osvPost, requireBoundedInt, requireEcosystem, requireString, severityLabel, trimDate,
-} from './utils.js';
-
-cli({
-    site: 'osv',
-    name: 'query',
-    access: 'read',
-    description: 'OSV.dev vulnerabilities affecting a package (optionally pinned to a version)',
-    domain: 'osv.dev',
-    strategy: Strategy.PUBLIC,
-    browser: false,
-    args: [
-        { name: 'package', positional: true, type: 'string', required: true, help: 'Package name (e.g. "lodash", "django")' },
-        { name: 'ecosystem', type: 'string', required: true, help: 'OSV ecosystem (npm / PyPI / Go / Maven / NuGet / RubyGems / crates.io / Packagist / ...)' },
-        { name: 'version', type: 'string', required: false, help: 'Pin to a specific version (e.g. "4.17.20"); omit for all known vulns' },
-        { name: 'limit', type: 'int', default: 30, help: 'Max rows to return (1-200)' },
-    ],
-    columns: [
-        'rank', 'id', 'summary', 'severity', 'aliases',
-        'published', 'modified', 'affectedPackages', 'url',
-    ],
-    func: async (args) => {
-        const name = requireString(args.package, 'package');
-        const ecosystem = requireEcosystem(args.ecosystem);
-        const limit = requireBoundedInt(args.limit, 30, 200, 'limit');
-        const payload = { package: { name, ecosystem } };
-        if (args.version != null && String(args.version).trim() !== '') {
-            payload.version = String(args.version).trim();
-        }
-        const body = await osvPost(`${OSV_BASE}/v1/query`, payload, `osv query ${ecosystem}:${name}`);
-        const vulns = Array.isArray(body?.vulns) ? body.vulns : [];
-        if (vulns.length === 0) {
-            throw new EmptyResultError(
-                'osv query',
-                `OSV.dev returned no vulnerabilities for ${ecosystem}:${name}${payload.version ? `@${payload.version}` : ''}.`,
-            );
-        }
-        const sorted = vulns
-            .slice()
-            .sort((a, b) => String(b?.published ?? '').localeCompare(String(a?.published ?? '')))
-            .slice(0, limit);
-        return sorted.map((v, i) => {
-            const affected = Array.isArray(v.affected) ? v.affected : [];
-            const pkgPairs = [];
-            for (const a of affected) {
-                const eco = a?.package?.ecosystem;
-                const aname = a?.package?.name;
-                if (eco && aname) pkgPairs.push(`${eco}:${aname}`);
-            }
-            const aliases = Array.isArray(v.aliases) ? v.aliases.filter(Boolean) : [];
-            return {
-                rank: i + 1,
-                id: String(v.id ?? ''),
-                summary: String(v.summary ?? '').trim(),
-                severity: severityLabel(v),
-                aliases: aliases.join(', '),
-                published: trimDate(v.published),
-                modified: trimDate(v.modified),
-                affectedPackages: pkgPairs.join(', '),
-                url: v.id ? `https://osv.dev/vulnerability/${v.id}` : '',
-            };
-        });
-    },
-});
+import{cli as g,Strategy as v}from"@jackwener/opencli/registry";import{EmptyResultError as k}from"@jackwener/opencli/errors";import{OSV_BASE as h,osvPost as b,requireBoundedInt as S,requireEcosystem as q,requireString as P,severityLabel as w,trimDate as m}from"./utils.js";g({site:"osv",name:"query",access:"read",description:"OSV.dev vulnerabilities affecting a package (optionally pinned to a version)",domain:"osv.dev",strategy:v.PUBLIC,browser:!1,args:[{name:"package",positional:!0,type:"string",required:!0,help:'Package name (e.g. "lodash", "django")'},{name:"ecosystem",type:"string",required:!0,help:"OSV ecosystem (npm / PyPI / Go / Maven / NuGet / RubyGems / crates.io / Packagist / ...)"},{name:"version",type:"string",required:!1,help:'Pin to a specific version (e.g. "4.17.20"); omit for all known vulns'},{name:"limit",type:"int",default:30,help:"Max rows to return (1-200)"}],columns:["rank","id","summary","severity","aliases","published","modified","affectedPackages","url"],func:async(i)=>{const r=P(i.package,"package"),a=q(i.ecosystem),p=S(i.limit,30,200,"limit"),s={package:{name:r,ecosystem:a}};if(i.version!=null&&String(i.version).trim()!=="")s.version=String(i.version).trim();const n=await b(`${h}/v1/query`,s,`osv query ${a}:${r}`),o=Array.isArray(n?.vulns)?n.vulns:[];if(o.length===0)throw new k("osv query",`OSV.dev returned no vulnerabilities for ${a}:${r}${s.version?`@${s.version}`:""}.`);return o.slice().sort((e,t)=>String(t?.published??"").localeCompare(String(e?.published??""))).slice(0,p).map((e,t)=>{const y=Array.isArray(e.affected)?e.affected:[],l=[];for(const c of y){const u=c?.package?.ecosystem,d=c?.package?.name;if(u&&d)l.push(`${u}:${d}`)}const f=Array.isArray(e.aliases)?e.aliases.filter(Boolean):[];return{rank:t+1,id:String(e.id??""),summary:String(e.summary??"").trim(),severity:w(e),aliases:f.join(", "),published:m(e.published),modified:m(e.modified),affectedPackages:l.join(", "),url:e.id?`https://osv.dev/vulnerability/${e.id}`:""}})}});

package/clis/osv/utils.js

@@ -1,169 +1 @@
-// Shared helpers for the OSV.dev (Open Source Vulnerabilities) adapters.
-//
-// OSV.dev publishes a free, unauthenticated REST API at https://api.osv.dev.
-// Docs: https://google.github.io/osv.dev/api/
-import { ArgumentError, CommandExecutionError, EmptyResultError } from '@jackwener/opencli/errors';
-
-export const OSV_BASE = 'https://api.osv.dev';
-const UA = 'opencli-osv-adapter (+https://github.com/jackwener/opencli)';
-
-// OSV vulnerability IDs are short tokens like "GHSA-29mw-wpgm-hmr9", "CVE-2020-28500", "PYSEC-2021-1".
-const VULN_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/;
-
-// OSV ecosystems we accept on input. The full canonical list is at
-// https://ossf.github.io/osv-schema/#defined-ecosystems — we accept the public
-// ones that map cleanly to package registries opencli already supports.
-export const OSV_ECOSYSTEMS = new Set([
-    'npm',
-    'PyPI',
-    'Go',
-    'Maven',
-    'NuGet',
-    'RubyGems',
-    'crates.io',
-    'Packagist',
-    'Pub',
-    'Hex',
-    'Hackage',
-    'CRAN',
-    'Bitnami',
-    'GitHub Actions',
-    'SwiftURL',
-]);
-
-export function requireString(value, label) {
-    const s = String(value ?? '').trim();
-    if (!s) throw new ArgumentError(`osv ${label} cannot be empty`);
-    return s;
-}
-
-export function requireVulnId(value) {
-    const s = String(value ?? '').trim();
-    if (!s) {
-        throw new ArgumentError(
-            'osv vulnerability id is required (e.g. "GHSA-29mw-wpgm-hmr9", "CVE-2020-28500")',
-            'IDs are listed at https://osv.dev — paste the canonical id from the vulnerability page.',
-        );
-    }
-    if (!VULN_ID.test(s)) {
-        throw new ArgumentError(
-            `osv vulnerability id "${value}" is not a valid OSV id`,
-            'IDs are short ASCII tokens like "GHSA-...", "CVE-...", "PYSEC-...".',
-        );
-    }
-    return s;
-}
-
-export function requireEcosystem(value) {
-    const s = String(value ?? '').trim();
-    if (!s) {
-        throw new ArgumentError(
-            'osv --ecosystem is required when querying by package',
-            `Pick one of: ${[...OSV_ECOSYSTEMS].join(', ')}.`,
-        );
-    }
-    if (!OSV_ECOSYSTEMS.has(s)) {
-        throw new ArgumentError(
-            `osv --ecosystem "${value}" is not a recognised OSV ecosystem`,
-            `Pick one of: ${[...OSV_ECOSYSTEMS].join(', ')}.`,
-        );
-    }
-    return s;
-}
-
-export function requireBoundedInt(value, defaultValue, maxValue, label = 'limit') {
-    const raw = value ?? defaultValue;
-    const n = typeof raw === 'number' ? raw : Number(raw);
-    if (!Number.isInteger(n) || n <= 0) {
-        throw new ArgumentError(`osv ${label} must be a positive integer`);
-    }
-    if (n > maxValue) {
-        throw new ArgumentError(`osv ${label} must be <= ${maxValue}`);
-    }
-    return n;
-}
-
-async function readJson(resp, label) {
-    let body;
-    try {
-        body = await resp.json();
-    }
-    catch (err) {
-        throw new CommandExecutionError(`${label} returned malformed JSON: ${err?.message ?? err}`);
-    }
-    return body;
-}
-
-export async function osvGet(url, label) {
-    let resp;
-    try {
-        resp = await fetch(url, { headers: { 'user-agent': UA, accept: 'application/json' } });
-    }
-    catch (err) {
-        throw new CommandExecutionError(
-            `${label} request failed: ${err?.message ?? err}`,
-            'Check that api.osv.dev is reachable from this network.',
-        );
-    }
-    if (resp.status === 404) {
-        throw new EmptyResultError(label, `OSV.dev returned 404 for ${url}.`);
-    }
-    if (resp.status === 429) {
-        throw new CommandExecutionError(`${label} returned HTTP 429 (rate limited)`);
-    }
-    if (!resp.ok) {
-        throw new CommandExecutionError(`${label} returned HTTP ${resp.status}`);
-    }
-    return readJson(resp, label);
-}
-
-export async function osvPost(url, payload, label) {
-    let resp;
-    try {
-        resp = await fetch(url, {
-            method: 'POST',
-            headers: { 'user-agent': UA, accept: 'application/json', 'content-type': 'application/json' },
-            body: JSON.stringify(payload),
-        });
-    }
-    catch (err) {
-        throw new CommandExecutionError(
-            `${label} request failed: ${err?.message ?? err}`,
-            'Check that api.osv.dev is reachable from this network.',
-        );
-    }
-    if (resp.status === 404) {
-        throw new EmptyResultError(label, `OSV.dev returned 404 for ${url}.`);
-    }
-    if (resp.status === 429) {
-        throw new CommandExecutionError(`${label} returned HTTP 429 (rate limited)`);
-    }
-    if (!resp.ok) {
-        const text = await resp.text().catch(() => '');
-        throw new CommandExecutionError(`${label} returned HTTP ${resp.status}${text ? `: ${text.slice(0, 200)}` : ''}`);
-    }
-    return readJson(resp, label);
-}
-
-// Reduce OSV's `severity` array to a single human-readable label.
-// Returns null when no severity is recorded; never invents a value.
-export function severityLabel(vuln) {
-    const dbSpecific = vuln?.database_specific;
-    if (dbSpecific && typeof dbSpecific.severity === 'string' && dbSpecific.severity.trim()) {
-        return dbSpecific.severity.trim();
-    }
-    const arr = Array.isArray(vuln?.severity) ? vuln.severity : [];
-    for (const entry of arr) {
-        if (entry && typeof entry.score === 'string' && entry.score.trim()) {
-            return entry.score.trim();
-        }
-    }
-    return null;
-}
-
-export function trimDate(value) {
-    const s = String(value ?? '').trim();
-    if (!s) return null;
-    const noFrac = s.replace(/\.\d+/, '');
-    return noFrac.endsWith('Z') ? noFrac : (s.length >= 10 ? s.slice(0, 10) : null);
-}
+import{ArgumentError as K,CommandExecutionError as P,EmptyResultError as W}from"@jackwener/opencli/errors";export const OSV_BASE="https://api.osv.dev";const X="opencli-osv-adapter (+https://github.com/jackwener/opencli)",$=/^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/;export const OSV_ECOSYSTEMS=new Set(["npm","PyPI","Go","Maven","NuGet","RubyGems","crates.io","Packagist","Pub","Hex","Hackage","CRAN","Bitnami","GitHub Actions","SwiftURL"]);export function requireString(B,q){const z=String(B??"").trim();if(!z)throw new K(`osv ${q} cannot be empty`);return z}export function requireVulnId(B){const q=String(B??"").trim();if(!q)throw new K('osv vulnerability id is required (e.g. "GHSA-29mw-wpgm-hmr9", "CVE-2020-28500")',"IDs are listed at https://osv.dev — paste the canonical id from the vulnerability page.");if(!$.test(q))throw new K(`osv vulnerability id "${B}" is not a valid OSV id`,'IDs are short ASCII tokens like "GHSA-...", "CVE-...", "PYSEC-...".');return q}export function requireEcosystem(B){const q=String(B??"").trim();if(!q)throw new K("osv --ecosystem is required when querying by package",`Pick one of: ${[...OSV_ECOSYSTEMS].join(", ")}.`);if(!OSV_ECOSYSTEMS.has(q))throw new K(`osv --ecosystem "${B}" is not a recognised OSV ecosystem`,`Pick one of: ${[...OSV_ECOSYSTEMS].join(", ")}.`);return q}export function requireBoundedInt(B,q,z,G="limit"){const H=B??q,Q=typeof H==="number"?H:Number(H);if(!Number.isInteger(Q)||Q<=0)throw new K(`osv ${G} must be a positive integer`);if(Q>z)throw new K(`osv ${G} must be <= ${z}`);return Q}async function Z(B,q){let z;try{z=await B.json()}catch(G){throw new P(`${q} returned malformed JSON: ${G?.message??G}`)}return z}export async function osvGet(B,q){let z;try{z=await fetch(B,{headers:{"user-agent":X,accept:"application/json"}})}catch(G){throw new P(`${q} request failed: ${G?.message??G}`,"Check that api.osv.dev is reachable from this network.")}if(z.status===404)throw new W(q,`OSV.dev returned 404 for ${B}.`);if(z.status===429)throw new P(`${q} returned HTTP 429 (rate limited)`);if(!z.ok)throw new P(`${q} returned HTTP ${z.status}`);return Z(z,q)}export async function osvPost(B,q,z){let G;try{G=await fetch(B,{method:"POST",headers:{"user-agent":X,accept:"application/json","content-type":"application/json"},body:JSON.stringify(q)})}catch(H){throw new P(`${z} request failed: ${H?.message??H}`,"Check that api.osv.dev is reachable from this network.")}if(G.status===404)throw new W(z,`OSV.dev returned 404 for ${B}.`);if(G.status===429)throw new P(`${z} returned HTTP 429 (rate limited)`);if(!G.ok){const H=await G.text().catch(()=>"");throw new P(`${z} returned HTTP ${G.status}${H?`: ${H.slice(0,200)}`:""}`)}return Z(G,z)}export function severityLabel(B){const q=B?.database_specific;if(q&&typeof q.severity==="string"&&q.severity.trim())return q.severity.trim();const z=Array.isArray(B?.severity)?B.severity:[];for(const G of z)if(G&&typeof G.score==="string"&&G.score.trim())return G.score.trim();return null}export function trimDate(B){const q=String(B??"").trim();if(!q)return null;const z=q.replace(/\.\d+/,"");return z.endsWith("Z")?z:q.length>=10?q.slice(0,10):null}

package/clis/osv/vulnerability.js

@@ -1,54 +1 @@
-// osv vulnerability — fetch a single OSV vulnerability by id.
-//
-// Hits `https://api.osv.dev/v1/vulns/<id>`. Returns one row with the canonical
-// id, summary, severity, aliases (CVE / GHSA mappings), publish / modify dates,
-// and the affected packages (flattened to a comma-separated "ecosystem:name" list).
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { EmptyResultError } from '@jackwener/opencli/errors';
-import { OSV_BASE, osvGet, requireVulnId, severityLabel, trimDate } from './utils.js';
-
-cli({
-    site: 'osv',
-    name: 'vulnerability',
-    access: 'read',
-    description: 'Single OSV.dev vulnerability detail (severity, affected packages, CVE/GHSA aliases)',
-    domain: 'osv.dev',
-    strategy: Strategy.PUBLIC,
-    browser: false,
-    args: [
-        { name: 'id', positional: true, type: 'string', required: true, help: 'OSV vulnerability id (e.g. "GHSA-29mw-wpgm-hmr9", "CVE-2020-28500")' },
-    ],
-    columns: [
-        'id', 'summary', 'severity', 'aliases', 'published', 'modified',
-        'affectedPackages', 'cwes', 'referenceCount', 'url',
-    ],
-    func: async (args) => {
-        const id = requireVulnId(args.id);
-        const vuln = await osvGet(`${OSV_BASE}/v1/vulns/${encodeURIComponent(id)}`, `osv vulnerability ${id}`);
-        if (!vuln || !vuln.id) {
-            throw new EmptyResultError('osv vulnerability', `OSV.dev returned no record for "${id}".`);
-        }
-        const affected = Array.isArray(vuln.affected) ? vuln.affected : [];
-        const pkgPairs = [];
-        for (const a of affected) {
-            const eco = a?.package?.ecosystem;
-            const name = a?.package?.name;
-            if (eco && name) pkgPairs.push(`${eco}:${name}`);
-        }
-        const aliases = Array.isArray(vuln.aliases) ? vuln.aliases.filter(Boolean) : [];
-        const cwes = Array.isArray(vuln?.database_specific?.cwe_ids) ? vuln.database_specific.cwe_ids : [];
-        const refs = Array.isArray(vuln.references) ? vuln.references : [];
-        return [{
-            id: String(vuln.id),
-            summary: String(vuln.summary ?? '').trim(),
-            severity: severityLabel(vuln),
-            aliases: aliases.join(', '),
-            published: trimDate(vuln.published),
-            modified: trimDate(vuln.modified),
-            affectedPackages: pkgPairs.join(', '),
-            cwes: cwes.join(', '),
-            referenceCount: refs.length,
-            url: `https://osv.dev/vulnerability/${vuln.id}`,
-        }];
-    },
-});
+import{cli as m,Strategy as u}from"@jackwener/opencli/registry";import{EmptyResultError as y}from"@jackwener/opencli/errors";import{OSV_BASE as v,osvGet as p,requireVulnId as g,severityLabel as b,trimDate as n}from"./utils.js";m({site:"osv",name:"vulnerability",access:"read",description:"Single OSV.dev vulnerability detail (severity, affected packages, CVE/GHSA aliases)",domain:"osv.dev",strategy:u.PUBLIC,browser:!1,args:[{name:"id",positional:!0,type:"string",required:!0,help:'OSV vulnerability id (e.g. "GHSA-29mw-wpgm-hmr9", "CVE-2020-28500")'}],columns:["id","summary","severity","aliases","published","modified","affectedPackages","cwes","referenceCount","url"],func:async(o)=>{const i=g(o.id),e=await p(`${v}/v1/vulns/${encodeURIComponent(i)}`,`osv vulnerability ${i}`);if(!e||!e.id)throw new y("osv vulnerability",`OSV.dev returned no record for "${i}".`);const c=Array.isArray(e.affected)?e.affected:[],s=[];for(const a of c){const r=a?.package?.ecosystem,t=a?.package?.name;if(r&&t)s.push(`${r}:${t}`)}const d=Array.isArray(e.aliases)?e.aliases.filter(Boolean):[],l=Array.isArray(e?.database_specific?.cwe_ids)?e.database_specific.cwe_ids:[],f=Array.isArray(e.references)?e.references:[];return[{id:String(e.id),summary:String(e.summary??"").trim(),severity:b(e),aliases:d.join(", "),published:n(e.published),modified:n(e.modified),affectedPackages:s.join(", "),cwes:l.join(", "),referenceCount:f.length,url:`https://osv.dev/vulnerability/${e.id}`}]}});

package/clis/packagist/package.js

@@ -1,49 +1 @@
-// packagist package — fetch a single Packagist package's metadata.
-//
-// Hits `https://packagist.org/packages/<vendor>/<package>.json`. Returns
-// one row: latest stable version + release time, license, repository,
-// description, lifetime / monthly / daily downloads, github stars, favers.
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { CommandExecutionError } from '@jackwener/opencli/errors';
-import { PACKAGIST_BASE, packagistFetch, pickStableVersion, requirePackageName, trimDate } from './utils.js';
-
-cli({
-    site: 'packagist',
-    name: 'package',
-    access: 'read',
-    description: 'Fetch a Packagist package\'s metadata (version, downloads, license, repo, GitHub stars)',
-    domain: 'packagist.org',
-    strategy: Strategy.PUBLIC,
-    browser: false,
-    args: [
-        { name: 'name', positional: true, required: true, help: 'Composer package "<vendor>/<package>" (e.g. "symfony/console", "monolog/monolog")' },
-    ],
-    columns: ['package', 'version', 'releasedAt', 'license', 'description', 'repository', 'githubStars', 'favers', 'downloads', 'monthlyDownloads', 'dailyDownloads', 'url'],
-    func: async (args) => {
-        const { full } = requirePackageName(args.name);
-        const url = `${PACKAGIST_BASE}/packages/${full}.json`;
-        const body = await packagistFetch(url, 'packagist package');
-        const pkg = body?.package;
-        if (!pkg || typeof pkg !== 'object') {
-            throw new CommandExecutionError(`packagist package returned no "package" object for ${full}.`);
-        }
-        const versionKey = pickStableVersion(pkg.versions);
-        const versionEntry = versionKey ? pkg.versions?.[versionKey] : null;
-        const license = Array.isArray(versionEntry?.license) ? versionEntry.license.filter(Boolean).join(', ') : '';
-        const downloads = pkg.downloads ?? {};
-        return [{
-            package: String(pkg.name ?? full).trim(),
-            version: versionKey ? String(versionKey) : '',
-            releasedAt: trimDate(versionEntry?.time),
-            license,
-            description: String(pkg.description ?? '').trim(),
-            repository: String(pkg.repository ?? '').trim(),
-            githubStars: pkg.github_stars != null ? Number(pkg.github_stars) : null,
-            favers: pkg.favers != null ? Number(pkg.favers) : null,
-            downloads: downloads.total != null ? Number(downloads.total) : null,
-            monthlyDownloads: downloads.monthly != null ? Number(downloads.monthly) : null,
-            dailyDownloads: downloads.daily != null ? Number(downloads.daily) : null,
-            url: `https://packagist.org/packages/${full}`,
-        }];
-    },
-});
+import{cli as l,Strategy as c}from"@jackwener/opencli/registry";import{CommandExecutionError as g}from"@jackwener/opencli/errors";import{PACKAGIST_BASE as p,packagistFetch as d,pickStableVersion as m,requirePackageName as u,trimDate as k}from"./utils.js";l({site:"packagist",name:"package",access:"read",description:"Fetch a Packagist package's metadata (version, downloads, license, repo, GitHub stars)",domain:"packagist.org",strategy:c.PUBLIC,browser:!1,args:[{name:"name",positional:!0,required:!0,help:'Composer package "<vendor>/<package>" (e.g. "symfony/console", "monolog/monolog")'}],columns:["package","version","releasedAt","license","description","repository","githubStars","favers","downloads","monthlyDownloads","dailyDownloads","url"],func:async(r)=>{const{full:o}=u(r.name),n=`${p}/packages/${o}.json`,e=(await d(n,"packagist package"))?.package;if(!e||typeof e!=="object")throw new g(`packagist package returned no "package" object for ${o}.`);const s=m(e.versions),t=s?e.versions?.[s]:null,i=Array.isArray(t?.license)?t.license.filter(Boolean).join(", "):"",a=e.downloads??{};return[{package:String(e.name??o).trim(),version:s?String(s):"",releasedAt:k(t?.time),license:i,description:String(e.description??"").trim(),repository:String(e.repository??"").trim(),githubStars:e.github_stars!=null?Number(e.github_stars):null,favers:e.favers!=null?Number(e.favers):null,downloads:a.total!=null?Number(a.total):null,monthlyDownloads:a.monthly!=null?Number(a.monthly):null,dailyDownloads:a.daily!=null?Number(a.daily):null,url:`https://packagist.org/packages/${o}`}]}});

package/clis/packagist/search.js

@@ -1,43 +1 @@
-// packagist search — search Packagist's PHP / Composer package registry.
-//
-// Hits `https://packagist.org/search.json?q=…&per_page=…`. Returns the
-// agent-useful projection: vendor/package (round-trips into `packagist
-// package`), description, lifetime download count, GitHub-stars-style favers,
-// repository URL.
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { EmptyResultError } from '@jackwener/opencli/errors';
-import { PACKAGIST_BASE, packagistFetch, requireBoundedInt, requireString } from './utils.js';
-
-cli({
-    site: 'packagist',
-    name: 'search',
-    access: 'read',
-    description: 'Search Packagist (PHP / Composer) packages by keyword',
-    domain: 'packagist.org',
-    strategy: Strategy.PUBLIC,
-    browser: false,
-    args: [
-        { name: 'query', positional: true, required: true, help: 'Search keyword (e.g. "symfony", "laravel http")' },
-        { name: 'limit', type: 'int', default: 30, help: 'Max packages (1-100, single Packagist page)' },
-    ],
-    columns: ['rank', 'package', 'description', 'downloads', 'favers', 'repository', 'url'],
-    func: async (args) => {
-        const query = requireString(args.query, 'query');
-        const limit = requireBoundedInt(args.limit, 30, 100);
-        const url = `${PACKAGIST_BASE}/search.json?q=${encodeURIComponent(query)}&per_page=${limit}`;
-        const body = await packagistFetch(url, 'packagist search');
-        const list = Array.isArray(body?.results) ? body.results : [];
-        if (!list.length) {
-            throw new EmptyResultError('packagist search', `No Packagist packages matched "${query}".`);
-        }
-        return list.slice(0, limit).map((row, i) => ({
-            rank: i + 1,
-            package: String(row.name ?? '').trim(),
-            description: String(row.description ?? '').trim(),
-            downloads: row.downloads != null ? Number(row.downloads) : null,
-            favers: row.favers != null ? Number(row.favers) : null,
-            repository: String(row.repository ?? '').trim(),
-            url: String(row.url ?? '').trim(),
-        }));
-    },
-});
+import{cli as c,Strategy as p}from"@jackwener/opencli/registry";import{EmptyResultError as l}from"@jackwener/opencli/errors";import{PACKAGIST_BASE as g,packagistFetch as u,requireBoundedInt as m,requireString as d}from"./utils.js";c({site:"packagist",name:"search",access:"read",description:"Search Packagist (PHP / Composer) packages by keyword",domain:"packagist.org",strategy:p.PUBLIC,browser:!1,args:[{name:"query",positional:!0,required:!0,help:'Search keyword (e.g. "symfony", "laravel http")'},{name:"limit",type:"int",default:30,help:"Max packages (1-100, single Packagist page)"}],columns:["rank","package","description","downloads","favers","repository","url"],func:async(r)=>{const a=d(r.query,"query"),t=m(r.limit,30,100),o=`${g}/search.json?q=${encodeURIComponent(a)}&per_page=${t}`,s=await u(o,"packagist search"),i=Array.isArray(s?.results)?s.results:[];if(!i.length)throw new l("packagist search",`No Packagist packages matched "${a}".`);return i.slice(0,t).map((e,n)=>({rank:n+1,package:String(e.name??"").trim(),description:String(e.description??"").trim(),downloads:e.downloads!=null?Number(e.downloads):null,favers:e.favers!=null?Number(e.favers):null,repository:String(e.repository??"").trim(),url:String(e.url??"").trim()}))}});

package/clis/packagist/utils.js

@@ -1,113 +1 @@
-// Shared helpers for the Packagist (PHP / Composer) adapters.
-//
-// Hits the public, unauthenticated `packagist.org` JSON endpoints. Composer's
-// canonical package registry. Package names are `<vendor>/<package>`,
-// lowercase letters / digits / `_-.`, with each segment 1-100 chars.
-import { ArgumentError, CommandExecutionError, EmptyResultError } from '@jackwener/opencli/errors';
-
-export const PACKAGIST_BASE = 'https://packagist.org';
-const UA = 'opencli-packagist-adapter (+https://github.com/jackwener/opencli)';
-
-// Each segment of a Composer package name (`vendor` and `package`).
-const SEGMENT = /^[a-z0-9]([_.-]?[a-z0-9]+)*$/;
-
-export function requireString(value, label) {
-    const s = String(value ?? '').trim();
-    if (!s) throw new ArgumentError(`packagist ${label} cannot be empty`);
-    return s;
-}
-
-export function requireBoundedInt(value, defaultValue, maxValue, label = 'limit') {
-    const raw = value ?? defaultValue;
-    const n = typeof raw === 'number' ? raw : Number(raw);
-    if (!Number.isInteger(n) || n <= 0) {
-        throw new ArgumentError(`packagist ${label} must be a positive integer`);
-    }
-    if (n > maxValue) {
-        throw new ArgumentError(`packagist ${label} must be <= ${maxValue}`);
-    }
-    return n;
-}
-
-export function requirePackageName(value) {
-    const raw = String(value ?? '').trim().toLowerCase();
-    if (!raw) {
-        throw new ArgumentError('packagist package name is required (e.g. "symfony/console", "monolog/monolog")');
-    }
-    const slash = raw.indexOf('/');
-    if (slash <= 0 || slash === raw.length - 1) {
-        throw new ArgumentError(
-            `packagist package "${value}" must be "<vendor>/<package>"`,
-            'Both segments are required (Composer convention).',
-        );
-    }
-    const vendor = raw.slice(0, slash);
-    const pkg = raw.slice(slash + 1);
-    if (vendor.length > 100 || pkg.length > 100 || !SEGMENT.test(vendor) || !SEGMENT.test(pkg)) {
-        throw new ArgumentError(
-            `packagist package "${value}" is not a valid Composer name`,
-            'Use lowercase letters / digits / "_-.", segments separated by single "_-." chars (max 100 chars each).',
-        );
-    }
-    return { vendor, package: pkg, full: `${vendor}/${pkg}` };
-}
-
-export async function packagistFetch(url, label) {
-    let resp;
-    try {
-        resp = await fetch(url, { headers: { 'user-agent': UA, accept: 'application/json' } });
-    }
-    catch (err) {
-        throw new CommandExecutionError(
-            `${label} request failed: ${err?.message ?? err}`,
-            'Check that packagist.org is reachable from this network.',
-        );
-    }
-    if (resp.status === 404) {
-        throw new EmptyResultError(label, `Packagist returned 404 for ${url}.`);
-    }
-    if (resp.status === 429) {
-        throw new CommandExecutionError(
-            `${label} returned HTTP 429 (rate limited)`,
-            'Packagist throttles bursts; wait a few seconds and retry.',
-        );
-    }
-    if (!resp.ok) {
-        throw new CommandExecutionError(`${label} returned HTTP ${resp.status}`);
-    }
-    let body;
-    try {
-        body = await resp.json();
-    }
-    catch (err) {
-        throw new CommandExecutionError(`${label} returned malformed JSON: ${err?.message ?? err}`);
-    }
-    return body;
-}
-
-/** Trim "2026-05-05T17:32:01+00:00" → "2026-05-05T17:32:01Z" so timestamps are uniform. */
-export function trimDate(value) {
-    const s = String(value ?? '').trim();
-    if (!s) return null;
-    const noFrac = s.replace(/\.\d+/, '');
-    return noFrac.replace(/(?:[+-]\d{2}:?\d{2}|Z)?$/, 'Z');
-}
-
-/**
- * Pick the newest stable (non-dev / non-prerelease) version key from a
- * Packagist `versions` map. Packagist returns keys ordered newest-first.
- * Falls back to the first key if no stable found.
- */
-export function pickStableVersion(versions) {
-    if (!versions || typeof versions !== 'object') return null;
-    const keys = Object.keys(versions);
-    if (!keys.length) return null;
-    const PRE = /(?:^|[._\-+])(?:dev|alpha|beta|rc|pre|nightly)(?:[._\-+\d]|$)/i;
-    const DEV_SUFFIX = /\.x-dev$|-dev$/i;
-    for (const k of keys) {
-        if (DEV_SUFFIX.test(k)) continue;
-        if (PRE.test(k)) continue;
-        return k;
-    }
-    return keys[0];
-}
+import{ArgumentError as K,CommandExecutionError as O,EmptyResultError as W}from"@jackwener/opencli/errors";export const PACKAGIST_BASE="https://packagist.org";const Y="opencli-packagist-adapter (+https://github.com/jackwener/opencli)",Q=/^[a-z0-9]([_.-]?[a-z0-9]+)*$/;export function requireString(H,q){const z=String(H??"").trim();if(!z)throw new K(`packagist ${q} cannot be empty`);return z}export function requireBoundedInt(H,q,z,J="limit"){const B=H??q,L=typeof B==="number"?B:Number(B);if(!Number.isInteger(L)||L<=0)throw new K(`packagist ${J} must be a positive integer`);if(L>z)throw new K(`packagist ${J} must be <= ${z}`);return L}export function requirePackageName(H){const q=String(H??"").trim().toLowerCase();if(!q)throw new K('packagist package name is required (e.g. "symfony/console", "monolog/monolog")');const z=q.indexOf("/");if(z<=0||z===q.length-1)throw new K(`packagist package "${H}" must be "<vendor>/<package>"`,"Both segments are required (Composer convention).");const J=q.slice(0,z),B=q.slice(z+1);if(J.length>100||B.length>100||!Q.test(J)||!Q.test(B))throw new K(`packagist package "${H}" is not a valid Composer name`,'Use lowercase letters / digits / "_-.", segments separated by single "_-." chars (max 100 chars each).');return{vendor:J,package:B,full:`${J}/${B}`}}export async function packagistFetch(H,q){let z;try{z=await fetch(H,{headers:{"user-agent":Y,accept:"application/json"}})}catch(B){throw new O(`${q} request failed: ${B?.message??B}`,"Check that packagist.org is reachable from this network.")}if(z.status===404)throw new W(q,`Packagist returned 404 for ${H}.`);if(z.status===429)throw new O(`${q} returned HTTP 429 (rate limited)`,"Packagist throttles bursts; wait a few seconds and retry.");if(!z.ok)throw new O(`${q} returned HTTP ${z.status}`);let J;try{J=await z.json()}catch(B){throw new O(`${q} returned malformed JSON: ${B?.message??B}`)}return J}export function trimDate(H){const q=String(H??"").trim();if(!q)return null;return q.replace(/\.\d+/,"").replace(/(?:[+-]\d{2}:?\d{2}|Z)?$/,"Z")}export function pickStableVersion(H){if(!H||typeof H!=="object")return null;const q=Object.keys(H);if(!q.length)return null;const z=/(?:^|[._\-+])(?:dev|alpha|beta|rc|pre|nightly)(?:[._\-+\d]|$)/i,J=/\.x-dev$|-dev$/i;for(const B of q){if(J.test(B))continue;if(z.test(B))continue;return B}return q[0]}

package/clis/paperreview/feedback.js

@@ -1,53 +1 @@
-import { cli, Strategy } from '@jackwener/opencli/registry';
-import { CliError } from '@jackwener/opencli/errors';
-import { PAPERREVIEW_DOMAIN, ensureSuccess, parseYesNo, requestJson, summarizeFeedback, validateHelpfulness, } from './utils.js';
-cli({
-    site: 'paperreview',
-    name: 'feedback',
-    access: 'write',
-    description: 'Submit feedback for a paperreview.ai review token',
-    domain: PAPERREVIEW_DOMAIN,
-    strategy: Strategy.PUBLIC,
-    browser: false,
-    args: [
-        { name: 'token', positional: true, required: true, help: 'Review token returned by paperreview.ai' },
-        { name: 'helpfulness', required: true, type: 'int', help: 'Helpfulness score from 1 to 5' },
-        { name: 'critical-error', required: true, choices: ['yes', 'no'], help: 'Whether the review contains a critical error' },
-        { name: 'actionable-suggestions', required: true, choices: ['yes', 'no'], help: 'Whether the review contains actionable suggestions' },
-        { name: 'additional-comments', help: 'Optional free-text feedback' },
-        { name: 'timeout', type: 'int', required: false, default: 30, help: 'Max seconds for the overall command (default: 30)' },
-    ],
-    columns: ['status', 'token', 'helpfulness', 'critical_error', 'actionable_suggestions', 'message'],
-    func: async (kwargs) => {
-        const token = String(kwargs.token ?? '').trim();
-        if (!token) {
-            throw new CliError('ARGUMENT', 'A review token is required.');
-        }
-        const helpfulness = validateHelpfulness(kwargs.helpfulness);
-        const criticalError = parseYesNo(kwargs['critical-error'], 'critical-error');
-        const actionableSuggestions = parseYesNo(kwargs['actionable-suggestions'], 'actionable-suggestions');
-        const comments = String(kwargs['additional-comments'] ?? '').trim();
-        const payload = {
-            helpfulness,
-            has_critical_error: criticalError,
-            has_actionable_suggestions: actionableSuggestions,
-        };
-        if (comments) {
-            payload.additional_comments = comments;
-        }
-        const { response, payload: responsePayload } = await requestJson(`/api/feedback/${encodeURIComponent(token)}`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(payload),
-        });
-        ensureSuccess(response, responsePayload, 'Failed to submit feedback.', 'Check the token and try again');
-        return summarizeFeedback({
-            token,
-            helpfulness,
-            criticalError,
-            actionableSuggestions,
-            comments,
-            payload: responsePayload,
-        });
-    },
-});
+import{cli as u,Strategy as p}from"@jackwener/opencli/registry";import{CliError as d}from"@jackwener/opencli/errors";import{PAPERREVIEW_DOMAIN as m,ensureSuccess as f,parseYesNo as c,requestJson as h,summarizeFeedback as b,validateHelpfulness as g}from"./utils.js";u({site:"paperreview",name:"feedback",access:"write",description:"Submit feedback for a paperreview.ai review token",domain:m,strategy:p.PUBLIC,browser:!1,args:[{name:"token",positional:!0,required:!0,help:"Review token returned by paperreview.ai"},{name:"helpfulness",required:!0,type:"int",help:"Helpfulness score from 1 to 5"},{name:"critical-error",required:!0,choices:["yes","no"],help:"Whether the review contains a critical error"},{name:"actionable-suggestions",required:!0,choices:["yes","no"],help:"Whether the review contains actionable suggestions"},{name:"additional-comments",help:"Optional free-text feedback"},{name:"timeout",type:"int",required:!1,default:30,help:"Max seconds for the overall command (default: 30)"}],columns:["status","token","helpfulness","critical_error","actionable_suggestions","message"],func:async(e)=>{const t=String(e.token??"").trim();if(!t)throw new d("ARGUMENT","A review token is required.");const o=g(e.helpfulness),i=c(e["critical-error"],"critical-error"),a=c(e["actionable-suggestions"],"actionable-suggestions"),r=String(e["additional-comments"]??"").trim(),n={helpfulness:o,has_critical_error:i,has_actionable_suggestions:a};if(r)n.additional_comments=r;const{response:l,payload:s}=await h(`/api/feedback/${encodeURIComponent(t)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(n)});f(l,s,"Failed to submit feedback.","Check the token and try again");return b({token:t,helpfulness:o,criticalError:i,actionableSuggestions:a,comments:r,payload:s})}});