@claudeflows/cli 0.1.0

package/dist/lib/doctor.js

@@ -0,0 +1,344 @@
+import { execSync } from 'node:child_process';
+import { readFile, stat, readlink } from 'node:fs/promises';
+import { join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+import semver from 'semver';
+import { getInstalledDir } from './config.js';
+import { verifyIntegrity } from './integrity.js';
+async function fileExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function getVersion(command) {
+    try {
+        const output = execSync(command, { stdio: 'pipe', encoding: 'utf-8' }).trim();
+        // Extract version number from output like "v20.11.0" or "Python 3.12.0"
+        const match = output.match(/(\d+\.\d+\.\d+)/);
+        return match ? match[1] : null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function checkRuntime(manifest) {
+    const checks = [];
+    if (!manifest.runtime) {
+        return checks;
+    }
+    for (const [name, requiredRange] of Object.entries(manifest.runtime)) {
+        let versionCmd;
+        switch (name) {
+            case 'node':
+                versionCmd = 'node --version';
+                break;
+            case 'python':
+                versionCmd = 'python3 --version';
+                break;
+            case 'claude_code':
+                versionCmd = 'claude --version';
+                break;
+            default:
+                versionCmd = `${name} --version`;
+        }
+        const installed = getVersion(versionCmd);
+        if (!installed) {
+            checks.push({
+                name: `Runtime: ${name}`,
+                status: 'error',
+                message: `${name} is not installed (requires ${requiredRange})`,
+            });
+            continue;
+        }
+        if (semver.satisfies(installed, requiredRange)) {
+            checks.push({
+                name: `Runtime: ${name}`,
+                status: 'ok',
+                message: `${name} ${installed} satisfies ${requiredRange}`,
+            });
+        }
+        else {
+            checks.push({
+                name: `Runtime: ${name}`,
+                status: 'error',
+                message: `${name} ${installed} does not satisfy ${requiredRange}`,
+            });
+        }
+    }
+    return checks;
+}
+export async function checkMcp(manifest) {
+    const checks = [];
+    if (!manifest.mcp) {
+        return checks;
+    }
+    let mcpJson = { mcpServers: {} };
+    try {
+        const mcpPath = join(homedir(), '.claude', '.mcp.json');
+        const raw = await readFile(mcpPath, 'utf-8');
+        mcpJson = JSON.parse(raw);
+    }
+    catch {
+        // No MCP config found
+    }
+    for (const [name, config] of Object.entries(manifest.mcp)) {
+        const isConfigured = name in (mcpJson.mcpServers ?? {});
+        const isRequired = config.required !== false;
+        if (isConfigured) {
+            checks.push({
+                name: `MCP: ${name}`,
+                status: 'ok',
+                message: `${name} is configured`,
+            });
+            // Check env vars for this MCP server
+            if (config.env) {
+                for (const [envName, envConfig] of Object.entries(config.env)) {
+                    const isSet = !!process.env[envName];
+                    const envRequired = envConfig.required !== false;
+                    if (isSet) {
+                        checks.push({
+                            name: `MCP env: ${envName}`,
+                            status: 'ok',
+                            message: `${envName} is set`,
+                        });
+                    }
+                    else if (envRequired) {
+                        checks.push({
+                            name: `MCP env: ${envName}`,
+                            status: 'error',
+                            message: `${envName} is not set (required by ${name})`,
+                        });
+                    }
+                    else {
+                        checks.push({
+                            name: `MCP env: ${envName}`,
+                            status: 'warn',
+                            message: `${envName} is not set (optional for ${name})`,
+                        });
+                    }
+                }
+            }
+        }
+        else if (isRequired) {
+            checks.push({
+                name: `MCP: ${name}`,
+                status: 'error',
+                message: `${name} is not configured (required)`,
+            });
+        }
+        else {
+            checks.push({
+                name: `MCP: ${name}`,
+                status: 'warn',
+                message: `${name} is not configured (optional)`,
+            });
+        }
+    }
+    return checks;
+}
+export async function checkEnv(manifest) {
+    const checks = [];
+    if (!manifest.env) {
+        return checks;
+    }
+    for (const [name, config] of Object.entries(manifest.env)) {
+        const isSet = !!process.env[name];
+        const isRequired = config.required !== false;
+        if (isSet) {
+            checks.push({
+                name: `Env: ${name}`,
+                status: 'ok',
+                message: `${name} is set`,
+            });
+        }
+        else if (isRequired) {
+            checks.push({
+                name: `Env: ${name}`,
+                status: 'error',
+                message: `${name} is not set${config.description ? ` (${config.description})` : ''}`,
+            });
+        }
+        else {
+            checks.push({
+                name: `Env: ${name}`,
+                status: 'warn',
+                message: `${name} is not set (optional)${config.description ? ` — ${config.description}` : ''}`,
+            });
+        }
+    }
+    return checks;
+}
+export async function checkDeps(manifest) {
+    const checks = [];
+    if (!manifest.dependencies) {
+        return checks;
+    }
+    const installedDir = getInstalledDir();
+    for (const [depName, depConfig] of Object.entries(manifest.dependencies)) {
+        const depDir = join(installedDir, depName);
+        const depExists = await fileExists(join(depDir, 'workflow.json'));
+        const isRequired = depConfig.required !== false;
+        if (depExists) {
+            if (depConfig.version) {
+                try {
+                    const raw = await readFile(join(depDir, 'workflow.json'), 'utf-8');
+                    const depManifest = JSON.parse(raw);
+                    if (depManifest.version && semver.satisfies(depManifest.version, depConfig.version)) {
+                        checks.push({
+                            name: `Dep: ${depName}`,
+                            status: 'ok',
+                            message: `${depName} ${depManifest.version} satisfies ${depConfig.version}`,
+                        });
+                    }
+                    else {
+                        checks.push({
+                            name: `Dep: ${depName}`,
+                            status: 'warn',
+                            message: `${depName} ${depManifest.version ?? 'unknown'} may not satisfy ${depConfig.version}`,
+                        });
+                    }
+                }
+                catch {
+                    checks.push({
+                        name: `Dep: ${depName}`,
+                        status: 'warn',
+                        message: `${depName} is installed but version could not be verified`,
+                    });
+                }
+            }
+            else {
+                checks.push({
+                    name: `Dep: ${depName}`,
+                    status: 'ok',
+                    message: `${depName} is installed`,
+                });
+            }
+        }
+        else if (isRequired) {
+            checks.push({
+                name: `Dep: ${depName}`,
+                status: 'error',
+                message: `${depName} is not installed (required)`,
+            });
+        }
+        else {
+            checks.push({
+                name: `Dep: ${depName}`,
+                status: 'warn',
+                message: `${depName} is not installed (optional)`,
+            });
+        }
+    }
+    return checks;
+}
+export async function checkSkills(manifest, installDir) {
+    const checks = [];
+    const skillsDir = join(homedir(), '.claude', 'skills');
+    for (const skill of manifest.skills) {
+        const linkedName = `${manifest.name}-${skill.name}`;
+        const linkPath = join(skillsDir, linkedName);
+        const targetPath = resolve(installDir, skill.path);
+        // Check that the source file exists
+        if (!(await fileExists(targetPath))) {
+            checks.push({
+                name: `Skill: ${skill.name}`,
+                status: 'error',
+                message: `Source file not found: ${skill.path}`,
+            });
+            continue;
+        }
+        // Check that the symlink exists and points to the right place
+        try {
+            const actualTarget = await readlink(linkPath);
+            if (resolve(actualTarget) === resolve(targetPath)) {
+                checks.push({
+                    name: `Skill: ${skill.name}`,
+                    status: 'ok',
+                    message: `${linkedName} linked correctly`,
+                });
+            }
+            else {
+                checks.push({
+                    name: `Skill: ${skill.name}`,
+                    status: 'warn',
+                    message: `${linkedName} exists but points to ${actualTarget} instead of ${targetPath}`,
+                });
+            }
+        }
+        catch {
+            checks.push({
+                name: `Skill: ${skill.name}`,
+                status: 'error',
+                message: `${linkedName} is not linked in ${skillsDir}`,
+            });
+        }
+    }
+    return checks;
+}
+export async function checkIntegrity(manifest, installDir) {
+    const checks = [];
+    if (!manifest.integrity) {
+        checks.push({
+            name: 'Integrity',
+            status: 'warn',
+            message: 'No integrity block in workflow.json — file verification not available',
+        });
+        return checks;
+    }
+    try {
+        const result = await verifyIntegrity(installDir, manifest.integrity);
+        if (result.valid) {
+            checks.push({
+                name: 'Integrity',
+                status: 'ok',
+                message: `All ${Object.keys(manifest.integrity.files).length} file hashes verified`,
+            });
+        }
+        else {
+            if (result.mismatches.length > 0) {
+                checks.push({
+                    name: 'Integrity',
+                    status: 'error',
+                    message: `${result.mismatches.length} file(s) modified: ${result.mismatches.join(', ')}`,
+                });
+            }
+            if (result.missing.length > 0) {
+                checks.push({
+                    name: 'Integrity',
+                    status: 'error',
+                    message: `${result.missing.length} file(s) missing: ${result.missing.join(', ')}`,
+                });
+            }
+            if (result.extra.length > 0) {
+                checks.push({
+                    name: 'Integrity',
+                    status: 'warn',
+                    message: `${result.extra.length} extra file(s) not in manifest: ${result.extra.join(', ')}`,
+                });
+            }
+        }
+    }
+    catch (err) {
+        checks.push({
+            name: 'Integrity',
+            status: 'error',
+            message: `Integrity check failed: ${err.message}`,
+        });
+    }
+    return checks;
+}
+export async function runDoctor(manifest, installDir) {
+    const results = [];
+    results.push(...(await checkRuntime(manifest)));
+    results.push(...(await checkMcp(manifest)));
+    results.push(...(await checkEnv(manifest)));
+    results.push(...(await checkDeps(manifest)));
+    results.push(...(await checkSkills(manifest, installDir)));
+    results.push(...(await checkIntegrity(manifest, installDir)));
+    return results;
+}
+//# sourceMappingURL=doctor.js.map

package/dist/lib/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/lib/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAQjD,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,wEAAwE;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAA0B;IAC3D,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,IAAI,UAAkB,CAAC;QACvB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM;gBACT,UAAU,GAAG,gBAAgB,CAAC;gBAC9B,MAAM;YACR,KAAK,QAAQ;gBACX,UAAU,GAAG,mBAAmB,CAAC;gBACjC,MAAM;YACR,KAAK,aAAa;gBAChB,UAAU,GAAG,kBAAkB,CAAC;gBAChC,MAAM;YACR;gBACE,UAAU,GAAG,GAAG,IAAI,YAAY,CAAC;QACrC,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,IAAI,+BAA+B,aAAa,GAAG;aAChE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,GAAG,IAAI,IAAI,SAAS,cAAc,aAAa,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,IAAI,IAAI,SAAS,qBAAqB,aAAa,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,GAA4C,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;QAE7C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,GAAG,IAAI,gBAAgB;aACjC,CAAC,CAAC;YAEH,qCAAqC;YACrC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACf,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACrC,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC;oBAEjD,IAAI,KAAK,EAAE,CAAC;wBACV,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY,OAAO,EAAE;4BAC3B,MAAM,EAAE,IAAI;4BACZ,OAAO,EAAE,GAAG,OAAO,SAAS;yBAC7B,CAAC,CAAC;oBACL,CAAC;yBAAM,IAAI,WAAW,EAAE,CAAC;wBACvB,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY,OAAO,EAAE;4BAC3B,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE,GAAG,OAAO,4BAA4B,IAAI,GAAG;yBACvD,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,YAAY,OAAO,EAAE;4BAC3B,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,GAAG,OAAO,6BAA6B,IAAI,GAAG;yBACxD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,IAAI,+BAA+B;aAChD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,IAAI,+BAA+B;aAChD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAA0B;IACvD,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;QAE7C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,GAAG,IAAI,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,IAAI,cAAc,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;aACrF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,IAAI,yBAAyB,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAA0B;IACxD,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC;QAEhD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;oBACnE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;oBAC5D,IAAI,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;wBACpF,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,QAAQ,OAAO,EAAE;4BACvB,MAAM,EAAE,IAAI;4BACZ,OAAO,EAAE,GAAG,OAAO,IAAI,WAAW,CAAC,OAAO,cAAc,SAAS,CAAC,OAAO,EAAE;yBAC5E,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,QAAQ,OAAO,EAAE;4BACvB,MAAM,EAAE,MAAM;4BACd,OAAO,EAAE,GAAG,OAAO,IAAI,WAAW,CAAC,OAAO,IAAI,SAAS,oBAAoB,SAAS,CAAC,OAAO,EAAE;yBAC/F,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,QAAQ,OAAO,EAAE;wBACvB,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,GAAG,OAAO,iDAAiD;qBACrE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,QAAQ,OAAO,EAAE;oBACvB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,GAAG,OAAO,eAAe;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,OAAO,EAAE;gBACvB,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,OAAO,8BAA8B;aAClD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ,OAAO,EAAE;gBACvB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,OAAO,8BAA8B;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA0B,EAC1B,UAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEvD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAEnD,oCAAoC;QACpC,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE;gBAC5B,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,0BAA0B,KAAK,CAAC,IAAI,EAAE;aAChD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE;oBAC5B,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,GAAG,UAAU,mBAAmB;iBAC1C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE;oBAC5B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,GAAG,UAAU,yBAAyB,YAAY,eAAe,UAAU,EAAE;iBACvF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,UAAU,KAAK,CAAC,IAAI,EAAE;gBAC5B,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,GAAG,UAAU,qBAAqB,SAAS,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA0B,EAC1B,UAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,uEAAuE;SACjF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QAErE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,uBAAuB;aACpF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,sBAAsB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACzF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,qBAAqB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAClF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,mCAAmC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC5F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,2BAA4B,GAAa,CAAC,OAAO,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAA0B,EAC1B,UAAkB;IAElB,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAE9D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/env-manager.d.ts

@@ -0,0 +1,10 @@
+import type { EnvVar } from './manifest.js';
+export declare function checkEnvVar(name: string): string | undefined;
+export declare function promptEnvVar(name: string, config: EnvVar): Promise<string | null>;
+export declare function suggestShellExport(name: string, value: string): string;
+export declare function setupEnvVars(envConfig: Record<string, EnvVar>): Promise<{
+    set: string[];
+    missing: string[];
+    suggestions: string[];
+}>;
+//# sourceMappingURL=env-manager.d.ts.map

package/dist/lib/env-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-manager.d.ts","sourceRoot":"","sources":["../../src/lib/env-manager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE5D;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtE;AAaD,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAgBtE"}

package/dist/lib/env-manager.js

@@ -0,0 +1,60 @@
+import { input, confirm } from '@inquirer/prompts';
+import chalk from 'chalk';
+export function checkEnvVar(name) {
+    return process.env[name];
+}
+export async function promptEnvVar(name, config) {
+    const existing = checkEnvVar(name);
+    if (existing) {
+        return existing;
+    }
+    let message = `Environment variable ${chalk.bold(name)} is not set.`;
+    if (config.description) {
+        message += `\n  ${config.description}`;
+    }
+    if (config.url) {
+        message += `\n  Get it at: ${chalk.cyan(config.url)}`;
+    }
+    const shouldSet = await confirm({
+        message: `${message}\n  Would you like to set it now?`,
+        default: config.required !== false,
+    });
+    if (!shouldSet) {
+        return null;
+    }
+    const value = await input({
+        message: `Enter value for ${name}:`,
+    });
+    return value || null;
+}
+export function suggestShellExport(name, value) {
+    const shellRc = detectShellRc();
+    return `To persist this variable, add the following to ${chalk.bold(shellRc)}:\n\n  ${chalk.green(`export ${name}="${value}"`)}\n`;
+}
+function detectShellRc() {
+    const shell = process.env.SHELL ?? '';
+    if (shell.includes('zsh')) {
+        return '~/.zshrc';
+    }
+    if (shell.includes('bash')) {
+        return '~/.bashrc';
+    }
+    return '~/.profile';
+}
+export async function setupEnvVars(envConfig) {
+    const set = [];
+    const missing = [];
+    const suggestions = [];
+    for (const [name, config] of Object.entries(envConfig)) {
+        const value = await promptEnvVar(name, config);
+        if (value) {
+            set.push(name);
+            suggestions.push(suggestShellExport(name, value));
+        }
+        else {
+            missing.push(name);
+        }
+    }
+    return { set, missing, suggestions };
+}
+//# sourceMappingURL=env-manager.js.map

package/dist/lib/env-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-manager.js","sourceRoot":"","sources":["../../src/lib/env-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,MAAc;IAEd,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,GAAG,wBAAwB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IACrE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,IAAI,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,kBAAkB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;QAC9B,OAAO,EAAE,GAAG,OAAO,mCAAmC;QACtD,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,KAAK;KACnC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC;QACxB,OAAO,EAAE,mBAAmB,IAAI,GAAG;KACpC,CAAC,CAAC;IAEH,OAAO,KAAK,IAAI,IAAI,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,OAAO,kDAAkD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,CAAC;AACrI,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiC;IAEjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC"}

package/dist/lib/installer.d.ts

@@ -0,0 +1,3 @@
+export declare function downloadFromGithub(url: string, destDir: string): Promise<void>;
+export declare function extractWorkflow(source: string, dest: string): Promise<void>;
+//# sourceMappingURL=installer.d.ts.map

package/dist/lib/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/lib/installer.ts"],"names":[],"mappings":"AAKA,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBpF;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAejF"}

package/dist/lib/installer.js

@@ -0,0 +1,43 @@
+import { execSync } from 'node:child_process';
+import { rm, cp, mkdtemp, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+export async function downloadFromGithub(url, destDir) {
+    // Normalize the URL — accept both https://github.com/user/repo and full .git URLs
+    let repoUrl = url.trim();
+    if (!repoUrl.endsWith('.git')) {
+        repoUrl = repoUrl.replace(/\/$/, '') + '.git';
+    }
+    const tempDir = await mkdtemp(join(tmpdir(), 'cw-clone-'));
+    try {
+        execSync(`git clone --depth 1 "${repoUrl}" "${tempDir}/repo"`, {
+            stdio: 'pipe',
+            timeout: 60_000,
+        });
+        const clonedDir = join(tempDir, 'repo');
+        // Remove .git directory
+        await rm(join(clonedDir, '.git'), { recursive: true, force: true });
+        // Copy contents to destination
+        await cp(clonedDir, destDir, { recursive: true });
+    }
+    finally {
+        await rm(tempDir, { recursive: true, force: true });
+    }
+}
+export async function extractWorkflow(source, dest) {
+    // Determine if source is a local path or URL
+    try {
+        const s = await stat(source);
+        if (s.isDirectory()) {
+            await cp(source, dest, { recursive: true });
+            // Remove .git if present
+            await rm(join(dest, '.git'), { recursive: true, force: true });
+            return;
+        }
+    }
+    catch {
+        // Not a local path — try as URL
+    }
+    await downloadFromGithub(source, dest);
+}
+//# sourceMappingURL=installer.js.map

package/dist/lib/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/lib/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAe;IACnE,kFAAkF;IAClF,IAAI,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,QAAQ,CAAC,wBAAwB,OAAO,MAAM,OAAO,QAAQ,EAAE;YAC7D,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExC,wBAAwB;QACxB,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,+BAA+B;QAC/B,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAChE,6CAA6C;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,yBAAyB;YACzB,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IAED,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/lib/integrity.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Registry Ed25519 public key for verifying workflow signatures.
+ * The corresponding private key is stored as a GitHub Actions secret (CW_SIGNING_KEY).
+ * This key can also be fetched from: https://claudeflows.dev/.well-known/signing-key.pub
+ */
+export declare const REGISTRY_PUBLIC_KEY = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAcynktEtcJ38faZLHJkb4cpEIRyIMcDogyzCsL9YJn3w=\n-----END PUBLIC KEY-----";
+export interface IntegrityBlock {
+    algorithm: 'sha256';
+    files: Record<string, string>;
+    root: string;
+    signature?: string;
+}
+export interface IntegrityResult {
+    valid: boolean;
+    mismatches: string[];
+    missing: string[];
+    extra: string[];
+}
+/**
+ * Compute SHA-256 hashes for all files in a directory.
+ * Returns a map of relative POSIX paths to hex-encoded SHA-256 hashes.
+ */
+export declare function computeFileHashes(dir: string, excludePatterns?: string[]): Promise<Record<string, string>>;
+/**
+ * Compute a root hash from a file hash map.
+ * Sorts keys alphabetically, concatenates "path:hash" pairs, then SHA-256s the result.
+ */
+export declare function computeRootHash(files: Record<string, string>): string;
+/**
+ * Verify file integrity by recomputing hashes and comparing against expected values.
+ */
+export declare function verifyIntegrity(dir: string, expected: IntegrityBlock): Promise<IntegrityResult>;
+/**
+ * Verify an Ed25519 signature against a root hash using the registry public key.
+ */
+export declare function verifySignature(rootHash: string, signature: string, publicKey?: string): boolean;
+/**
+ * Build an integrity block for a workflow directory.
+ * Used during `claudeflows publish` to embed integrity data into workflow.json.
+ */
+export declare function buildIntegrityBlock(dir: string): Promise<IntegrityBlock>;
+//# sourceMappingURL=integrity.d.ts.map

package/dist/lib/integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../src/lib/integrity.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,uHACsF,CAAC;AAUvH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,QAAQ,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAqCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,eAAe,GAAE,MAAM,EAAqB,GAC3C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAcjC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIrE;AAED;;GAEG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,eAAe,CAAC,CA+B1B;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,MAA4B,GACtC,OAAO,CAQT;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAI9E"}

package/dist/lib/integrity.js

@@ -0,0 +1,119 @@
+import { createHash, verify as cryptoVerify } from 'node:crypto';
+import { readFile, readdir } from 'node:fs/promises';
+import { join, relative, posix } from 'node:path';
+/**
+ * Registry Ed25519 public key for verifying workflow signatures.
+ * The corresponding private key is stored as a GitHub Actions secret (CW_SIGNING_KEY).
+ * This key can also be fetched from: https://claudeflows.dev/.well-known/signing-key.pub
+ */
+export const REGISTRY_PUBLIC_KEY = '-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAcynktEtcJ38faZLHJkb4cpEIRyIMcDogyzCsL9YJn3w=\n-----END PUBLIC KEY-----';
+/** Patterns to exclude from integrity hashing */
+const EXCLUDE_PATTERNS = [
+    '.git',
+    'node_modules',
+    '.deps.json',
+    '.skill-links.json',
+];
+/**
+ * Recursively collect all file paths in a directory, excluding specified patterns.
+ */
+async function collectFiles(dir, baseDir, excludePatterns) {
+    const entries = await readdir(dir, { withFileTypes: true });
+    const files = [];
+    for (const entry of entries) {
+        const fullPath = join(dir, entry.name);
+        const relativePath = relative(baseDir, fullPath);
+        // Check if any exclude pattern matches
+        const shouldExclude = excludePatterns.some((pattern) => entry.name === pattern ||
+            relativePath === pattern ||
+            relativePath.startsWith(pattern + '/'));
+        if (shouldExclude)
+            continue;
+        if (entry.isDirectory()) {
+            files.push(...(await collectFiles(fullPath, baseDir, excludePatterns)));
+        }
+        else if (entry.isFile()) {
+            files.push(relativePath);
+        }
+    }
+    return files;
+}
+/**
+ * Compute SHA-256 hashes for all files in a directory.
+ * Returns a map of relative POSIX paths to hex-encoded SHA-256 hashes.
+ */
+export async function computeFileHashes(dir, excludePatterns = EXCLUDE_PATTERNS) {
+    const files = await collectFiles(dir, dir, excludePatterns);
+    const hashes = {};
+    for (const filePath of files) {
+        const fullPath = join(dir, filePath);
+        const content = await readFile(fullPath);
+        const hash = createHash('sha256').update(content).digest('hex');
+        // Normalize to POSIX paths for cross-platform consistency
+        const posixPath = filePath.split('/').join(posix.sep);
+        hashes[posixPath] = hash;
+    }
+    return hashes;
+}
+/**
+ * Compute a root hash from a file hash map.
+ * Sorts keys alphabetically, concatenates "path:hash" pairs, then SHA-256s the result.
+ */
+export function computeRootHash(files) {
+    const sorted = Object.keys(files).sort();
+    const concatenated = sorted.map((key) => `${key}:${files[key]}`).join('\n');
+    return createHash('sha256').update(concatenated).digest('hex');
+}
+/**
+ * Verify file integrity by recomputing hashes and comparing against expected values.
+ */
+export async function verifyIntegrity(dir, expected) {
+    const actual = await computeFileHashes(dir);
+    const actualRoot = computeRootHash(actual);
+    const mismatches = [];
+    const missing = [];
+    const extra = [];
+    // Check for files in expected but not in actual, or with different hashes
+    for (const [filePath, expectedHash] of Object.entries(expected.files)) {
+        if (!(filePath in actual)) {
+            missing.push(filePath);
+        }
+        else if (actual[filePath] !== expectedHash) {
+            mismatches.push(filePath);
+        }
+    }
+    // Check for files in actual but not in expected
+    for (const filePath of Object.keys(actual)) {
+        if (!(filePath in expected.files)) {
+            extra.push(filePath);
+        }
+    }
+    const valid = mismatches.length === 0 &&
+        missing.length === 0 &&
+        extra.length === 0 &&
+        actualRoot === expected.root;
+    return { valid, mismatches, missing, extra };
+}
+/**
+ * Verify an Ed25519 signature against a root hash using the registry public key.
+ */
+export function verifySignature(rootHash, signature, publicKey = REGISTRY_PUBLIC_KEY) {
+    try {
+        const signatureBuffer = Buffer.from(signature, 'base64');
+        const dataBuffer = Buffer.from(rootHash, 'utf-8');
+        return cryptoVerify(null, dataBuffer, publicKey, signatureBuffer);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Build an integrity block for a workflow directory.
+ * Used during `claudeflows publish` to embed integrity data into workflow.json.
+ */
+export async function buildIntegrityBlock(dir) {
+    const files = await computeFileHashes(dir);
+    const root = computeRootHash(files);
+    return { algorithm: 'sha256', files, root };
+}
+//# sourceMappingURL=integrity.js.map