uneven-ai 1.1.8 → 1.1.9

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to Uneven AI will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.9] - 2026-04-27
+
+### Added
+- **Attacker Identification (Uneven Trace)**: Active pentester now injects a silent origin-tracking header (`X-Uneven-Origin-Trace`) containing the attacker's machine IP.
+- **Threat Detection Engine**: Terminal watcher now detects incoming Uneven pentest probes and logs a critical security alert with the source IP.
+- **Portuguese Intent Support**: Shell now recognizes "crie", "faça", "escreva" for AI tasks even in keyword-fallback mode.
+
+### Changed
+- **License Gating**: Active Pentester mode is now restricted to the **Team** plan.
+- **Shell Stability**: Improved intent classification to prevent substring collision (e.g., "mundo" no longer triggers "undo").
+- **Success Hints**: Shell now only prints success hints if the underlying command actually returns a success exit code.
+
 ## [1.1.8] - 2026-04-27
 
 ### Added

package/README.md

@@ -158,7 +158,7 @@ uneven-ai ci
 Run `uneven-ai` with no arguments to open the interactive shell:
 
 ```
-  ◈  Uneven AI  v1.1.8
+  ◈  Uneven AI  v1.1.9
   ────────────────────────────────────────────────────────────
   Olá! O que posso fazer por você hoje?
   (Escreva sua mensagem ou "sair" para encerrar)

package/dist/application/analysis/active/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/application/analysis/active/helpers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAG5B,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1F;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC;IACpF,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,IAAI,EAAE,MAAM,CAAA;CACb,CAAC,CAmBD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,IAAI,CAAC,CA8BR;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAY9F"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../src/application/analysis/active/helpers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAI5B,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO1F;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC;IAC1F,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IACtD,IAAI,EAAE,MAAM,CAAA;CACb,CAAC,CA0BD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,OAAO,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,IAAI,CAAC,CA8BR;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAY9F"}

package/dist/application/analysis/active/helpers.js

@@ -3,6 +3,7 @@ import * as tls from 'tls';
 import * as https from 'https';
 import * as http from 'http';
 import { CONNECT_TIMEOUT_MS, HTTP_TIMEOUT_MS } from './context.js';
+import { getPublicIp } from '../../../infrastructure/utils/network.js';
 export function tcpConnect(host, port, timeoutMs) {
     return new Promise(resolve => {
         const sock = net.createConnection({ host, port });
@@ -11,10 +12,16 @@ export function tcpConnect(host, port, timeoutMs) {
         sock.on('error', () => { clearTimeout(timer); resolve(false); });
     });
 }
-export function httpRequest(options, useHttps) {
+export async function httpRequest(options, useHttps) {
+    const ip = await getPublicIp();
+    const customHeaders = {
+        ...options.headers,
+        'User-Agent': 'Uneven-Pentester/1.1.9',
+        ...(ip ? { 'X-Uneven-Origin-Trace': ip } : {})
+    };
     return new Promise((resolve, reject) => {
         const mod = useHttps ? https : http;
-        const req = mod.request({ ...options, rejectUnauthorized: false }, res => {
+        const req = mod.request({ ...options, headers: customHeaders, rejectUnauthorized: false }, res => {
             let body = '';
             res.on('data', (chunk) => { body += chunk.toString('utf-8'); });
             res.on('end', () => resolve({

package/dist/cli/commands/pentest.js

@@ -14,7 +14,7 @@ export async function pentestCommand(mode, options = {}) {
     const resolvedMode = mode || 'static';
     if (resolvedMode === 'active') {
         const { license } = await import('../../infrastructure/index.js');
-        await license.requirePro();
+        await license.requireTeam();
     }
     const ctx = new PentestSecurityContext();
     // ── Handle --declare-scope flag ─────────────────────────────────────────────

package/dist/cli/commands/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAsRH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CA8DlD"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgRH,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAgElD"}

package/dist/cli/commands/shell.js

@@ -49,8 +49,8 @@ async function spawnSubcommand(args) {
             stdio: 'inherit',
             env: process.env,
         });
-        child.on('close', resolve);
-        child.on('error', resolve);
+        child.on('close', (code) => resolve(code ?? 0));
+        child.on('error', () => resolve(1));
     });
 }
 /**
@@ -66,8 +66,8 @@ async function spawnWatch() {
         });
         const onSigint = () => child.kill('SIGTERM');
         process.on('SIGINT', onSigint);
-        child.on('close', () => { process.off('SIGINT', onSigint); resolve(); });
-        child.on('error', () => { process.off('SIGINT', onSigint); resolve(); });
+        child.on('close', (code) => { process.off('SIGINT', onSigint); resolve(code ?? 0); });
+        child.on('error', () => { process.off('SIGINT', onSigint); resolve(1); });
     });
 }
 // ─── Background task guard ────────────────────────────────────────────────────
@@ -121,24 +121,20 @@ async function execute(intent) {
     switch (intent.action) {
         case 'index':
             console.log(D('\n  ↳ Indexing your project…\n'));
-            await spawnSubcommand(['index']);
-            break;
+            return await spawnSubcommand(['index']);
         case 'scan':
             console.log(D('\n  ↳ Scanning for vulnerabilities and malicious patterns…\n'));
-            await spawnSubcommand(['scan']);
-            break;
+            return await spawnSubcommand(['scan']);
         case 'watch':
-            await spawnWatch();
-            break;
+            return await spawnWatch();
         case 'explain': {
             const file = intent.args.file;
             if (!file) {
                 console.log(Y('\n  Which file should I explain? e.g. "explain src/app.ts"\n'));
-                return;
+                return 1;
             }
             console.log(D(`\n  ↳ Explaining ${file}…\n`));
-            await spawnSubcommand(['explain', file]);
-            break;
+            return await spawnSubcommand(['explain', file]);
         }
         case 'review': {
             const args = ['review'];
@@ -149,50 +145,47 @@ async function execute(intent) {
             if (intent.args.staged)
                 args.push('--staged');
             console.log(D('\n  ↳ Running code review…\n'));
-            await spawnSubcommand(args);
-            break;
+            return await spawnSubcommand(args);
         }
         case 'docs': {
             const file = intent.args.file;
             if (!file) {
                 console.log(Y('\n  Which file should I document? e.g. "docs src/parser.ts"\n'));
-                return;
+                return 1;
             }
             console.log(D(`\n  ↳ Generating documentation for ${file}…\n`));
-            await spawnSubcommand(['docs', file]);
-            break;
+            return await spawnSubcommand(['docs', file]);
         }
         case 'askf': {
             const task = intent.args.task;
             console.log(D('\n  ↳ Task started in background — keep using the shell.\n'));
             spawnBackground(['askf', task], task);
-            break;
+            return 0;
         }
         case 'ask': {
             const question = intent.args.question;
             console.log(D('\n  ↳ Looking up context…\n'));
-            await spawnSubcommand(['ask', question]);
-            break;
+            return await spawnSubcommand(['ask', question]);
         }
         case 'log':
             console.log(D('\n  ↳ Loading activity log…\n'));
-            await spawnSubcommand(['log']);
-            break;
+            return await spawnSubcommand(['log']);
         case 'undo':
             console.log(D('\n  ↳ Reverting last fix…\n'));
-            await spawnSubcommand(['undo']);
-            break;
+            return await spawnSubcommand(['undo']);
         case 'help':
             printShellHelp();
-            break;
+            return 0;
         case 'exit':
-            break; // handled in the loop
+            return 0;
         case 'unknown':
             console.log(Y('\n  Not sure what you meant. ') +
                 D('I can help with:\n') +
                 D('  index · scan · watch · explain <file> · review · docs <file>\n') +
                 D('  questions about your project · log · undo · help · exit\n'));
-            break;
+            return 1;
+        default:
+            return 1;
     }
 }
 // ─── Shell help ───────────────────────────────────────────────────────────────
@@ -285,12 +278,14 @@ export async function shellCommand() {
             console.log('');
             console.log(A('  ◈ ') + chalk.hex('#e8edf5')(message));
         }
-        await execute(intent);
-        const hint = HINTS[intent.action];
-        if (hint) {
-            console.log('');
-            console.log(G('  ◈ ') + D(hint));
-            console.log('');
+        const code = await execute(intent);
+        if (code === 0) {
+            const hint = HINTS[intent.action];
+            if (hint) {
+                console.log('');
+                console.log(G('  ◈ ') + D(hint));
+                console.log('');
+            }
         }
     }
 }

package/dist/cli/shell/intent-classifier.js

@@ -10,7 +10,7 @@
  */
 // ─── Helpers ──────────────────────────────────────────────────────────────────
 function hasAny(low, words) {
-    return words.some(w => low.includes(w));
+    return words.some(w => new RegExp(`\\b${w}\\b`).test(low));
 }
 // ─── File-path extraction ─────────────────────────────────────────────────────
 export function extractFilePath(input) {
@@ -53,7 +53,7 @@ export function classifyIntent(raw) {
             confidence: 'high',
         };
     }
-    if (hasAny(low, ['askf']))
+    if (hasAny(low, ['askf', 'crie', 'cria', 'criação', 'escreva', 'faça', 'make', 'create']))
         return { action: 'askf', args: { task: input }, confidence: 'high' };
     const file = extractFilePath(input);
     if (file || hasAny(low, ['explain', 'explica']))

package/dist/infrastructure/io/logger/index.d.ts

@@ -31,6 +31,10 @@ export declare class Logger {
      * Log error message
      */
     error(message: string): Promise<void>;
+    /**
+     * Log critical security alert
+     */
+    critical(message: string): Promise<void>;
     /**
      * Log error detection
      */

package/dist/infrastructure/io/logger/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/infrastructure/io/logger/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,qBAAa,MAAM;IACjB,OAAO,CAAC,OAAO,CAAQ;IACvB;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAAmC;IACrD,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAe;gBAEhB,OAAO,GAAE,MAA2B;YAKlC,UAAU;IAexB;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1C;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3C;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/F;;OAEG;IACG,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC;IAqBhB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B;;;OAGG;IACH,OAAO,CAAC,KAAK;CAWd"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/infrastructure/io/logger/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,qBAAa,MAAM;IACjB,OAAO,CAAC,OAAO,CAAQ;IACvB;;;;OAIG;IACH,OAAO,CAAC,UAAU,CAAmC;IACrD,qDAAqD;IACrD,OAAO,CAAC,KAAK,CAAe;gBAEhB,OAAO,GAAE,MAA2B;YAKlC,UAAU;IAexB;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1C;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3C;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C;;OAEG;IACG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM9C;;OAEG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/F;;OAEG;IACG,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC;IAqBhB;;;;;OAKG;IACH,OAAO,CAAC,YAAY;IASpB;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B;;;OAGG;IACH,OAAO,CAAC,KAAK;CAWd"}

package/dist/infrastructure/io/logger/index.js

@@ -70,6 +70,14 @@ export class Logger {
         const entry = `## [${timestamp}] ❌ Error\n\n${message}\n\n---\n\n`;
         await this.write(entry);
     }
+    /**
+     * Log critical security alert
+     */
+    async critical(message) {
+        const timestamp = this.getTimestamp();
+        const entry = `## [${timestamp}] 🚨 CRITICAL ALERT\n\n${message}\n\n---\n\n`;
+        await this.write(entry);
+    }
     /**
      * Log error detection
      */

package/dist/infrastructure/io/process-watcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-watcher.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/io/process-watcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAA4B,MAAM,aAAa,CAAA;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACnE,SAAS,EAAE,IAAI,CAAA;IACf,IAAI,EAAE,GAAG,CAAA;CACV;AAQD,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,YAAY,CAAY;IAChC,OAAO,CAAC,SAAS,CAA6D;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA8B;IAClD,6EAA6E;IAC7E,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;IAKnD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8C3B;;OAEG;IACH,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQpE;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAIrE;;OAEG;IACH,OAAO,CAAC,SAAS;IAsBjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAoHpB;;OAEG;IACH,OAAO,CAAC,cAAc;IAmCtB;;OAEG;IACH,YAAY,IAAI,OAAO;CAGxB"}
+{"version":3,"file":"process-watcher.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/io/process-watcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,MAAM,EAA4B,MAAM,aAAa,CAAA;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACnE,SAAS,EAAE,IAAI,CAAA;IACf,IAAI,EAAE,GAAG,CAAA;CACV;AAQD,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAA4B;IAC3C,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,YAAY,CAAY;IAChC,OAAO,CAAC,SAAS,CAA6D;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,YAAY,CAA8B;IAClD,6EAA6E;IAC7E,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;IAKnD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAW5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA8C3B;;OAEG;IACH,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQpE;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAIrE;;OAEG;IACH,OAAO,CAAC,SAAS;IAsBjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAsIpB;;OAEG;IACH,OAAO,CAAC,cAAc;IAmCtB;;OAEG;IACH,YAAY,IAAI,OAAO;CAGxB"}

package/dist/infrastructure/io/process-watcher.js

@@ -178,6 +178,23 @@ export class ProcessWatcher {
                         fullOutput: text
                     });
                 }
+                // --- Attacker Attribution: Detect Uneven Trace Header ---
+                const traceMatch = text.match(/X-Uneven-Origin-Trace[:" ]+([\d.]{7,15})/i);
+                if (traceMatch) {
+                    const attackerIp = traceMatch[1];
+                    this.logger.critical(`SECURITY ALERT: Attacker identified via Uneven Trace! Origin IP: ${attackerIp}`);
+                    errors.push({
+                        type: 'security',
+                        severity: 'critical',
+                        file: 'SYSTEM',
+                        line: 0,
+                        column: 0,
+                        message: `URGENT: Incoming pentest probe detected from IP ${attackerIp} using Uneven AI.`,
+                        code: 'ATTACKER_ID',
+                        context: [text],
+                        fullOutput: text
+                    });
+                }
                 if (errors.length > 0) {
                     this.logger.warning(`Process: Detected ${errors.length} errors in output`);
                     this.emitEvent('error', { errors });

package/dist/infrastructure/license/gate.d.ts

@@ -5,4 +5,7 @@
 /** Returns true if the current machine has an active Pro (or Team) license. Never throws. */
 export declare function checkPro(): Promise<boolean>;
 export declare function requirePro(): Promise<void>;
+/** Returns true if the current machine has an active Team license. Never throws. */
+export declare function checkTeam(): Promise<boolean>;
+export declare function requireTeam(): Promise<void>;
 //# sourceMappingURL=gate.d.ts.map

package/dist/infrastructure/license/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/license/gate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,6FAA6F;AAC7F,wBAAsB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAGjD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAYhD"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/license/gate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,6FAA6F;AAC7F,wBAAsB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAGjD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAYhD;AAED,oFAAoF;AACpF,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAGlD;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAYjD"}

package/dist/infrastructure/license/gate.js

@@ -21,3 +21,20 @@ export async function requirePro() {
         process.exit(1);
     }
 }
+/** Returns true if the current machine has an active Team license. Never throws. */
+export async function checkTeam() {
+    const license = await check();
+    return license.active && license.tier === 'team';
+}
+export async function requireTeam() {
+    const license = await check();
+    if (license.tier !== 'team' || !license.active) {
+        console.log();
+        console.log(chalk.hex('#FFD700')('  This feature requires Uneven Team.'));
+        console.log();
+        console.log(chalk.dim('  Upgrade at:  ') + chalk.cyan('https://uneven.dev/pricing'));
+        console.log(chalk.dim('  Activate:    ') + chalk.cyan('uneven-ai license activate <your-key>'));
+        console.log();
+        process.exit(1);
+    }
+}

package/dist/infrastructure/license/index.d.ts

@@ -3,5 +3,5 @@ export * as LicenseManager from './manager.js';
 export { parseKey } from './verifier.js';
 export { readLicense, clearLicense } from './storage.js';
 export { getMachineId } from './fingerprint.js';
-export { requirePro, checkPro } from './gate.js';
+export { requirePro, checkPro, requireTeam, checkTeam } from './gate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/infrastructure/license/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/license/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAClE,OAAO,KAAK,cAAc,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/license/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAClE,OAAO,KAAK,cAAc,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA"}

package/dist/infrastructure/license/index.js

@@ -3,4 +3,4 @@ export * as LicenseManager from './manager.js';
 export { parseKey } from './verifier.js';
 export { readLicense, clearLicense } from './storage.js';
 export { getMachineId } from './fingerprint.js';
-export { requirePro, checkPro } from './gate.js';
+export { requirePro, checkPro, requireTeam, checkTeam } from './gate.js';

package/dist/infrastructure/utils/network.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Silently fetches the public IP of the current machine.
+ * Returns null if it fails or takes more than 1s.
+ */
+export declare function getPublicIp(): Promise<string | null>;
+//# sourceMappingURL=network.d.ts.map

package/dist/infrastructure/utils/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/utils/network.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqC1D"}

package/dist/infrastructure/utils/network.js

@@ -0,0 +1,44 @@
+import * as https from 'https';
+let cachedIp = null;
+let lastFetch = 0;
+const CACHE_TTL = 3600000; // 1 hour
+/**
+ * Silently fetches the public IP of the current machine.
+ * Returns null if it fails or takes more than 1s.
+ */
+export async function getPublicIp() {
+    const now = Date.now();
+    if (cachedIp && (now - lastFetch < CACHE_TTL)) {
+        return cachedIp;
+    }
+    return new Promise((resolve) => {
+        const options = {
+            hostname: 'api.ipify.org',
+            port: 443,
+            path: '/?format=json',
+            method: 'GET',
+            timeout: 1000 // 1s timeout for "silence"
+        };
+        const req = https.request(options, (res) => {
+            let data = '';
+            res.on('data', (chunk) => { data += chunk; });
+            res.on('end', () => {
+                try {
+                    const parsed = JSON.parse(data);
+                    cachedIp = parsed.ip;
+                    lastFetch = Date.now();
+                    resolve(cachedIp);
+                }
+                catch {
+                    resolve(null);
+                }
+            });
+        });
+        req.on('error', () => resolve(null));
+        req.on('timeout', () => {
+            req.destroy();
+            resolve(null);
+        });
+        req.end();
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "uneven-ai",
-  "version": "1.1.8",
+  "version": "1.1.9",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"