Wheelshop

@bixu/wheelshopv2026.05.04.3· 16d agoMODELS

01README

Community-TS guardrail for swamp extension authors — search npm/jsr for proven libraries, filter by trust gates (downloads, license, recency, vulnerabilities), and stop reinventing wheels

02Models1

@bixu/wheelshopv2026.05.04.1wheelshop.ts

Global Arguments

Argument	Type	Required	Description
cacheDir	string	yes	Directory for the 24h fetch cache
cacheTtlHours	number	yes	How long cached registry responses stay fresh, in hours

fn search(intent: string, keywords: array, runtime: enum, limit: number, unsafe: boolean)

Search npm/jsr for community libraries matching an intent, filter by trust gates, and return ranked recommendations. If all candidates fail the gates, returns action='ask_user' so the agent knows to prompt a human.

Argument	Type	Required	Description
intent	string	yes	Plain-English description of what you need a library for (e.g. 'parse cron expressions', 'retry with backoff')
keywords	array	yes	Optional extra keywords to refine the search
runtime	enum	yes	Target runtime — affects scoring; jsr is preferred when 'deno' or 'both'
limit	number	yes	Max candidates to return after filtering
unsafe	boolean	yes	Include candidates that fail trust gates (DO NOT enable without explicit user approval)

fn audit(package: string, version?: string, unsafe: boolean)

Audit a specific npm package + version against the same trust gates used by search. Useful for validating an existing dependency or a candidate the agent already has in mind.

Argument	Type	Required	Description
package	string	yes	Package name to audit (e.g. 'cron-parser', '@aws-sdk/client-s3')
version?	string	no	Version to audit (default: latest from the registry)
unsafe	boolean	yes	Report blockers but mark approved=true regardless