@crewdhq/crewd-mcp 0.0.0-stage → 0.1.7

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Crewd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,177 @@
-# Temporary Holding Version
+# Crewd CLI (`crewd`)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The official package manager for prompt-defined AI agents, skills, and teams across **Claude Code**, **Cursor**, and **Gemini CLI**!!
+
+[![Go Reference](https://pkg.go.dev/badge/github.com/crewdhq/crewd-cli.svg)](https://pkg.go.dev/github.com/crewdhq/crewd-cli)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+---
+
+## Installation
+
+### Homebrew (macOS / Linux)
+```bash
+brew install crewdhq/tap/crewd
+```
+
+### Standalone Shell Installer
+```bash
+curl -fsSL https://crewd.dev/install.sh | sh
+```
+
+### Build from Source
+```bash
+go install github.com/crewdhq/crewd-cli/cmd/crewd@latest
+```
+
+---
+
+## Quickstart
+
+```bash
+# 1. Initialize your repository with auto-detected hosts
+crewd init
+
+# 2. Hire an AI agent
+crewd hire @alice/reviewer
+
+# 3. Inspect your active crew
+crewd roster
+
+# 4. Check workspace health
+crewd doctor
+```
+
+---
+
+## Command Reference
+
+| Command | Usage | Description |
+| :--- | :--- | :--- |
+| `init` | `crewd init` | Initialize `crewd.json` and configure host gitignore blocks |
+| `hire` | `crewd hire <pkg>` | Hire an agent or skill into the workspace |
+| `hire team` | `crewd hire team <team>` | Hire a full multi-agent squad |
+| `fire` | `crewd fire <pkg>` | Remove an agent or skill from the workspace |
+| `promote` | `crewd promote [pkg]` | Upgrade installed agents while preserving local learnings |
+| `teach` | `crewd teach <agent> <skill>` | Teach an installed agent a repo-local skill |
+| `forget` | `crewd forget <agent> <skill>` | Remove a taught skill from an agent |
+| `install` | `crewd install [--frozen]` | Deterministically install all packages from `crewd.lock` |
+| `roster` | `crewd roster` | List all active agents, squad members, and skills |
+| `interview` | `crewd interview <pkg>` | Review prompt, tools, and scripts before hiring |
+| `doctor` | `crewd doctor` | Validate workspace health, lock sync, and host configs |
+| `search` | `crewd search <query>` | Search packages in the registry |
+| `mcp` | `crewd mcp` | Start the Model Context Protocol (MCP) server over stdio |
+| `cache clean` | `crewd cache clean` | Purge local blob and package caches |
+
+---
+
+## Crewd MCP Server (`@crewdhq/crewd-mcp`)
+
+Crewd provides a local stdio **Model Context Protocol (MCP)** server so coding agents (**Claude Code**, **Cursor**, **Gemini CLI**) can discover, inspect, plan, and hire agents directly inside active development sessions without switching away to terminal commands.
+
+### Setup & Installation
+
+#### 1. Claude Code
+Add Crewd directly to your Claude Code MCP configuration:
+```bash
+claude mcp add crewd -- npx @crewdhq/crewd-mcp
+```
+*(Or use the installed CLI binary: `claude mcp add crewd -- crewd mcp`)*
+
+#### 2. Cursor
+Add Crewd to `.cursor/mcp.json` or your global Cursor MCP configuration:
+```json
+{
+  "mcpServers": {
+    "crewd": {
+      "command": "npx",
+      "args": ["-y", "@crewdhq/crewd-mcp"]
+    }
+  }
+}
+```
+
+#### 3. Gemini CLI & Antigravity IDE
+Add Crewd to `settings.json` or your MCP server configuration:
+```json
+{
+  "mcpServers": {
+    "crewd": {
+      "command": "npx",
+      "args": ["-y", "@crewdhq/crewd-mcp"]
+    }
+  }
+}
+```
+
+---
+
+### Exposed MCP Tools
+
+| Tool | Parameters | Description |
+| :--- | :--- | :--- |
+| `search_packages` | `{ query, kind?, limit? }` | Discover agents, squads, and skills in the registry with publisher and tag metadata. |
+| `inspect_package` | `{ name, version? }` | Read-only inspection of agent prompts, role specifications, tool permissions, and script previews. Never executes code. |
+| `plan_hire` | `{ name, version?, targets? }` | Dry-run resolution returning exact files to be created/changed, SHA-256 integrity hashes, script warnings, and a single-use `confirm_token`. Writes nothing. |
+| `hire` | `{ name, version?, targets?, confirm_token }` | Executes installation into the repository with user approval. Requires valid `confirm_token`. Installs scripts as inert files only. |
+| `list_installed` | `{}` | Lists all active agents, teams, skills, versions, and configured hosts from `crewd.json` and `crewd.lock`. |
+| `check_updates` | `{}` | Compares installed packages in `crewd.lock` against the registry and details available upgrades and added/removed skills. |
+
+---
+
+### Security & Safety Model
+
+Installing AI agents is a trust boundary. The Crewd MCP server implements strict defensive controls:
+
+1. **Two-Phase Hire with Confirmation Tokens**:
+   - `hire` cannot execute without a prior `plan_hire` run.
+   - `plan_hire` returns an in-memory `confirm_token` (5-minute TTL, single-use, cryptographically bound to the package name and version).
+   - Calling agents are instructed to present the plan, changed files, and script warnings to the user and obtain explicit user approval before calling `hire`.
+2. **File-Only Script Installation**:
+   - Package scripts (`.sh`, `scripts/`) are flagged prominently during planning.
+   - `hire` writes scripts to disk as standard files only. The MCP server **never** executes package scripts.
+3. **Prompt-Injection Defense**:
+   - All registry data (descriptions, READMEs, prompts) is treated as untrusted input.
+   - Long fields are truncated and sanitized to prevent instruction override attacks.
+4. **Path Traversal Protection**:
+   - File paths in downloaded tarballs are strictly validated against directory traversal attacks (`..`, absolute paths, symlink escapes).
+   - Writes are strictly contained within the detected workspace project root.
+5. **Cryptographic Integrity**:
+   - Package archives are verified against SHA-256 integrity hashes declared by the registry before extraction or file generation.
+6. **Zero Leaks**:
+   - No additional telemetry beyond what the CLI already sends. Configurable via `CREWD_NO_TELEMETRY=true`.
+
+---
+
+## Using Hired Agents in Your AI Coding Environment
+
+Once you run `crewd hire <agent>` or `crewd hire team <team>`, Crewd compiles the agent, its skills, and its durable memory directly into native configuration files for your environment.
+
+### 1. Claude Code
+Crewd generates `.claude/agents/<name>.md` subagents and `.claude/skills/<skill>/SKILL.md`:
+- **Direct invocation:** `/agent <name> "Review changes in src/ against main"`
+- **Natural language:** `"Delegate this diff review to our code-reviewer agent."`
+- **Tool safety:** Safe enforcement of `tools.allow` and `tools.deny` restrictions.
+- **Durable memory:** Claude checks and appends learnings to `.crewd/memory/<name>.md`.
+
+### 2. Cursor
+Crewd compiles rules to `.cursor/rules/crewd-<name>.mdc`:
+- **In Chat (`Cmd+L`) / Composer (`Cmd+I`):** `@crewd-<name> please audit this file for security issues.`
+- **Auto-context:** Rules activate automatically when opening files matching configured globs.
+- **Skills:** Mention skills directly, e.g. `@crewd-skill-owasp-top10`.
+
+### 3. Gemini CLI & Antigravity IDE
+Crewd injects marker-delimited blocks into `GEMINI.md`:
+- **Direct prompt:** `"As our code-reviewer, inspect git diff and provide blocking/should-fix feedback."`
+- **Skills:** Loaded on demand from `.gemini/skills/<skill>/SKILL.md`.
+- **Preserved content:** User custom rules outside `<!-- crewd:begin ... -->` markers are untouched.
+
+### 4. Durable Agent Memory
+- Each agent maintains persistent repository learnings in `.crewd/memory/<name>.md`.
+- Memory is upgrade-safe: running `crewd promote` updates prompts without wiping project memories.
+
+---
+
+## License
+
+[MIT](LICENSE) © Crewd

package/dist-mcp/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist-mcp/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist-mcp/cli.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const server_js_1 = require("./server.js");
+(0, server_js_1.startStdioServer)().catch((err) => {
+    console.error("Crewd MCP server error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist-mcp/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;;AACA,2CAA+C;AAE/C,IAAA,4BAAgB,GAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC/B,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist-mcp/core/adapters.d.ts

@@ -0,0 +1,29 @@
+import { HostId } from "../types.js";
+import { PackageFile } from "./tar.js";
+export interface GeneratedFile {
+    path: string;
+    content: string | Buffer;
+}
+export declare const MEMORY_INSTRUCTION_PROMPT = "\n### Memory & Local Learnings\nCheck and update project-specific memory in `%s` if you learn reusable repository patterns or rules.";
+export declare function parsePackageManifestFromFiles(files: Map<string, PackageFile>): Record<string, unknown> | null;
+/**
+ * Renders Claude Code native files (.claude/agents/<name>.md and .claude/skills/<name>/SKILL.md)
+ */
+export declare function renderClaude(pkgName: string, version: string, manifest: Record<string, unknown>, files: Map<string, PackageFile>): GeneratedFile[];
+/**
+ * Renders Cursor native files (.cursor/rules/crewd-<name>.mdc)
+ */
+export declare function renderCursor(pkgName: string, version: string, manifest: Record<string, unknown>, files: Map<string, PackageFile>): GeneratedFile[];
+/**
+ * Renders Gemini CLI native files (GEMINI.md marker delimited block, .gemini/skills/)
+ */
+export declare function renderGemini(pkgName: string, version: string, manifest: Record<string, unknown>, files: Map<string, PackageFile>, repoRoot: string): GeneratedFile[];
+/**
+ * Compiles files across all selected host environments and returns generated files.
+ */
+export declare function compilePackageFiles(pkgName: string, version: string, manifest: Record<string, unknown>, files: Map<string, PackageFile>, hosts: HostId[], repoRoot: string): GeneratedFile[];
+/**
+ * Updates .gitignore with marker blocks for active hosts.
+ */
+export declare function updateGitignoreBlocks(repoRoot: string, hosts: HostId[]): void;
+//# sourceMappingURL=adapters.d.ts.map

package/dist-mcp/core/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/core/adapters.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAWD,eAAO,MAAM,yBAAyB,yIAEiE,CAAC;AAWxG,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAoB7G;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAC9B,aAAa,EAAE,CAiEjB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,GAC9B,aAAa,EAAE,CA8CjB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAC/B,QAAQ,EAAE,MAAM,GACf,aAAa,EAAE,CA8EjB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAC/B,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,GACf,aAAa,EAAE,CA8BjB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAsC7E"}

package/dist-mcp/core/adapters.js

@@ -0,0 +1,306 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMORY_INSTRUCTION_PROMPT = void 0;
+exports.parsePackageManifestFromFiles = parsePackageManifestFromFiles;
+exports.renderClaude = renderClaude;
+exports.renderCursor = renderCursor;
+exports.renderGemini = renderGemini;
+exports.compilePackageFiles = compilePackageFiles;
+exports.updateGitignoreBlocks = updateGitignoreBlocks;
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const yaml_1 = __importDefault(require("yaml"));
+const TOOL_MAP = {
+    read: "Read",
+    grep: "Grep",
+    glob: "Glob",
+    bash: "Bash",
+    edit: "Edit",
+    write: "Write",
+};
+exports.MEMORY_INSTRUCTION_PROMPT = `
+### Memory & Local Learnings
+Check and update project-specific memory in \`%s\` if you learn reusable repository patterns or rules.`;
+function generatedHeader(pkgName, version) {
+    return `<!-- Generated by crewd ${pkgName}@${version} - DO NOT EDIT -->`;
+}
+function cleanPackageName(pkgName) {
+    const parts = pkgName.split("/");
+    return parts[parts.length - 1].replace(/^@/, "");
+}
+function parsePackageManifestFromFiles(files) {
+    const agentYaml = files.get("agent.yaml");
+    if (agentYaml) {
+        try {
+            return yaml_1.default.parse(agentYaml.content.toString("utf-8"));
+        }
+        catch {
+            return null;
+        }
+    }
+    const skillYaml = files.get("skill.yaml");
+    if (skillYaml) {
+        try {
+            return yaml_1.default.parse(skillYaml.content.toString("utf-8"));
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Renders Claude Code native files (.claude/agents/<name>.md and .claude/skills/<name>/SKILL.md)
+ */
+function renderClaude(pkgName, version, manifest, files) {
+    const cleanName = cleanPackageName(pkgName);
+    const pkgType = manifest.type || "agent";
+    const results = [];
+    if (pkgType === "agent") {
+        const promptRel = manifest.prompt || "PROMPT.md";
+        const promptFile = files.get(promptRel);
+        const promptText = promptFile ? promptFile.content.toString("utf-8") : "";
+        const role = manifest.role || {};
+        const toolsConfig = manifest.tools || {};
+        const allowTools = toolsConfig.allow || [];
+        const mappedTools = allowTools.map((t) => TOOL_MAP[t.toLowerCase()] || t);
+        const skills = manifest.skills || [];
+        const skillNames = skills.map((s) => cleanPackageName(s));
+        const frontmatterObj = {
+            name: cleanName,
+            description: role.when || manifest.description || "",
+        };
+        if (mappedTools.length > 0)
+            frontmatterObj.tools = mappedTools;
+        if (skillNames.length > 0)
+            frontmatterObj.skills = skillNames;
+        // Check claude-code override for model
+        const overrides = manifest.overrides || {};
+        const claudeOverride = overrides["claude-code"] || {};
+        const fmOverride = claudeOverride["frontmatter"] || {};
+        if (typeof fmOverride["model"] === "string") {
+            frontmatterObj.model = fmOverride["model"];
+        }
+        const fmYaml = yaml_1.default.stringify(frontmatterObj).trim();
+        const memPath = `.crewd/memory/${cleanName}.md`;
+        const memBlock = exports.MEMORY_INSTRUCTION_PROMPT.replace("%s", memPath);
+        const fullContent = `---\n${fmYaml}\n---\n${generatedHeader(pkgName, version)}\n\n${promptText}\n${memBlock}\n`;
+        results.push({
+            path: node_path_1.default.join(".claude", "agents", `${cleanName}.md`),
+            content: fullContent,
+        });
+    }
+    else if (pkgType === "skill") {
+        const entryRel = manifest.entry || "SKILL.md";
+        const entryFile = files.get(entryRel);
+        const entryText = entryFile ? entryFile.content.toString("utf-8") : "";
+        results.push({
+            path: node_path_1.default.join(".claude", "skills", cleanName, "SKILL.md"),
+            content: `${generatedHeader(pkgName, version)}\n\n${entryText}`,
+        });
+        const fileList = manifest.files || [];
+        for (const f of fileList) {
+            const fileData = files.get(f);
+            if (fileData) {
+                results.push({
+                    path: node_path_1.default.join(".claude", "skills", cleanName, f),
+                    content: fileData.content,
+                });
+            }
+        }
+    }
+    return results;
+}
+/**
+ * Renders Cursor native files (.cursor/rules/crewd-<name>.mdc)
+ */
+function renderCursor(pkgName, version, manifest, files) {
+    const cleanName = cleanPackageName(pkgName);
+    const pkgType = manifest.type || "agent";
+    const results = [];
+    if (pkgType === "agent") {
+        const promptRel = manifest.prompt || "PROMPT.md";
+        const promptFile = files.get(promptRel);
+        const promptText = promptFile ? promptFile.content.toString("utf-8") : "";
+        const role = manifest.role || {};
+        const description = role.when || manifest.description || "";
+        const memPath = `.crewd/memory/${cleanName}.md`;
+        const memBlock = exports.MEMORY_INSTRUCTION_PROMPT.replace("%s", memPath);
+        const frontmatter = `---
+description: ${JSON.stringify(description)}
+globs: ["**/*"]
+alwaysApply: false
+---`;
+        const fullContent = `${frontmatter}\n${generatedHeader(pkgName, version)}\n\n${promptText}\n${memBlock}\n`;
+        results.push({
+            path: node_path_1.default.join(".cursor", "rules", `crewd-${cleanName}.mdc`),
+            content: fullContent,
+        });
+    }
+    else if (pkgType === "skill") {
+        const entryRel = manifest.entry || "SKILL.md";
+        const entryFile = files.get(entryRel);
+        const entryText = entryFile ? entryFile.content.toString("utf-8") : "";
+        const description = manifest.description || "";
+        const frontmatter = `---
+description: ${JSON.stringify(description)}
+globs: ["**/*"]
+alwaysApply: false
+---`;
+        results.push({
+            path: node_path_1.default.join(".cursor", "rules", `crewd-skill-${cleanName}.mdc`),
+            content: `${frontmatter}\n${generatedHeader(pkgName, version)}\n\n${entryText}\n`,
+        });
+    }
+    return results;
+}
+/**
+ * Renders Gemini CLI native files (GEMINI.md marker delimited block, .gemini/skills/)
+ */
+function renderGemini(pkgName, version, manifest, files, repoRoot) {
+    const cleanName = cleanPackageName(pkgName);
+    const pkgType = manifest.type || "agent";
+    const results = [];
+    if (pkgType === "agent") {
+        const promptRel = manifest.prompt || "PROMPT.md";
+        const promptFile = files.get(promptRel);
+        const promptText = promptFile ? promptFile.content.toString("utf-8") : "";
+        const role = manifest.role || {};
+        const title = role.title || cleanName;
+        const when = role.when || manifest.description || "";
+        const memPath = `.crewd/memory/${cleanName}.md`;
+        const memBlock = exports.MEMORY_INSTRUCTION_PROMPT.replace("%s", memPath);
+        const beginMarker = `<!-- crewd:begin ${cleanName} -->`;
+        const endMarker = `<!-- crewd:end ${cleanName} -->`;
+        const sectionBody = `${beginMarker}
+### Agent: ${title} (${pkgName}@${version})
+> ${when}
+
+${promptText}
+${memBlock}
+${endMarker}`;
+        // Read existing GEMINI.md if present
+        const geminiMdPath = node_path_1.default.join(repoRoot, "GEMINI.md");
+        let existingContent = "";
+        if (node_fs_1.default.existsSync(geminiMdPath)) {
+            try {
+                existingContent = node_fs_1.default.readFileSync(geminiMdPath, "utf-8");
+            }
+            catch {
+                existingContent = "";
+            }
+        }
+        let updatedContent = "";
+        if (existingContent.includes(beginMarker) && existingContent.includes(endMarker)) {
+            const startIndex = existingContent.indexOf(beginMarker);
+            const endIndex = existingContent.indexOf(endMarker) + endMarker.length;
+            updatedContent = existingContent.substring(0, startIndex) + sectionBody + existingContent.substring(endIndex);
+        }
+        else {
+            if (existingContent && !existingContent.endsWith("\n")) {
+                existingContent += "\n";
+            }
+            updatedContent = existingContent ? `${existingContent}\n${sectionBody}\n` : `${sectionBody}\n`;
+        }
+        results.push({
+            path: "GEMINI.md",
+            content: updatedContent,
+        });
+    }
+    else if (pkgType === "skill") {
+        const entryRel = manifest.entry || "SKILL.md";
+        const entryFile = files.get(entryRel);
+        const entryText = entryFile ? entryFile.content.toString("utf-8") : "";
+        results.push({
+            path: node_path_1.default.join(".gemini", "skills", cleanName, "SKILL.md"),
+            content: `${generatedHeader(pkgName, version)}\n\n${entryText}`,
+        });
+        const fileList = manifest.files || [];
+        for (const f of fileList) {
+            const fileData = files.get(f);
+            if (fileData) {
+                results.push({
+                    path: node_path_1.default.join(".gemini", "skills", cleanName, f),
+                    content: fileData.content,
+                });
+            }
+        }
+    }
+    return results;
+}
+/**
+ * Compiles files across all selected host environments and returns generated files.
+ */
+function compilePackageFiles(pkgName, version, manifest, files, hosts, repoRoot) {
+    const generated = [];
+    for (const host of hosts) {
+        if (host === "claude-code") {
+            generated.push(...renderClaude(pkgName, version, manifest, files));
+        }
+        else if (host === "cursor") {
+            generated.push(...renderCursor(pkgName, version, manifest, files));
+        }
+        else if (host === "gemini-cli") {
+            generated.push(...renderGemini(pkgName, version, manifest, files, repoRoot));
+        }
+    }
+    // Memory file for agents
+    const pkgType = manifest.type || "agent";
+    if (pkgType === "agent") {
+        const cleanName = cleanPackageName(pkgName);
+        const memRelPath = node_path_1.default.join(".crewd", "memory", `${cleanName}.md`);
+        const fullMemPath = node_path_1.default.join(repoRoot, memRelPath);
+        if (!node_fs_1.default.existsSync(fullMemPath)) {
+            const memScaffold = `# Agent Memory: ${cleanName}\n\nLocal repository learnings and rules for ${pkgName}.\n`;
+            generated.push({
+                path: memRelPath,
+                content: memScaffold,
+            });
+        }
+    }
+    return generated;
+}
+/**
+ * Updates .gitignore with marker blocks for active hosts.
+ */
+function updateGitignoreBlocks(repoRoot, hosts) {
+    const gitignorePath = node_path_1.default.join(repoRoot, ".gitignore");
+    let content = "";
+    if (node_fs_1.default.existsSync(gitignorePath)) {
+        try {
+            content = node_fs_1.default.readFileSync(gitignorePath, "utf-8");
+        }
+        catch {
+            content = "";
+        }
+    }
+    const hostIgnores = {
+        "claude-code": [".claude/agents/", ".claude/skills/"],
+        cursor: [".cursor/rules/crewd-*"],
+        "gemini-cli": [".gemini/skills/"],
+    };
+    for (const host of hosts) {
+        const patterns = hostIgnores[host] || [];
+        if (patterns.length === 0)
+            continue;
+        const beginMarker = `<!-- crewd:begin ${host} -->`;
+        const endMarker = `<!-- crewd:end ${host} -->`;
+        const block = `${beginMarker}\n${patterns.join("\n")}\n${endMarker}`;
+        if (content.includes(beginMarker) && content.includes(endMarker)) {
+            const start = content.indexOf(beginMarker);
+            const end = content.indexOf(endMarker) + endMarker.length;
+            content = content.substring(0, start) + block + content.substring(end);
+        }
+        else {
+            if (content && !content.endsWith("\n")) {
+                content += "\n";
+            }
+            content += `\n${block}\n`;
+        }
+    }
+    node_fs_1.default.writeFileSync(gitignorePath, content, "utf-8");
+}
+//# sourceMappingURL=adapters.js.map

package/dist-mcp/core/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/core/adapters.ts"],"names":[],"mappings":";;;;;;AAiCA,sEAoBC;AAKD,oCAsEC;AAKD,oCAmDC;AAKD,oCAoFC;AAKD,kDAqCC;AAKD,sDAsCC;AAtWD,0DAA6B;AAC7B,sDAAyB;AACzB,gDAAwB;AASxB,MAAM,QAAQ,GAA2B;IACvC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACf,CAAC;AAEW,QAAA,yBAAyB,GAAG;;uGAE8D,CAAC;AAExG,SAAS,eAAe,CAAC,OAAe,EAAE,OAAe;IACvD,OAAO,2BAA2B,OAAO,IAAI,OAAO,oBAAoB,CAAC;AAC3E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,6BAA6B,CAAC,KAA+B;IAC3E,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,OAAO,cAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA4B,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,OAAO,cAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA4B,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAC1B,OAAe,EACf,OAAe,EACf,QAAiC,EACjC,KAA+B;IAE/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAe,IAAI,OAAO,CAAC;IACrD,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAI,QAAQ,CAAC,MAAiB,IAAI,WAAW,CAAC;QAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,MAAM,IAAI,GAAI,QAAQ,CAAC,IAA+B,IAAI,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAI,QAAQ,CAAC,KAA8B,IAAI,EAAE,CAAC;QACnE,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1E,MAAM,MAAM,GAAI,QAAQ,CAAC,MAAmB,IAAI,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,cAAc,GAA4B;YAC9C,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,IAAI,CAAC,IAAI,IAAK,QAAQ,CAAC,WAAsB,IAAI,EAAE;SACjE,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,cAAc,CAAC,KAAK,GAAG,WAAW,CAAC;QAC/D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,cAAc,CAAC,MAAM,GAAG,UAAU,CAAC;QAE9D,uCAAuC;QACvC,MAAM,SAAS,GAAI,QAAQ,CAAC,SAAqC,IAAI,EAAE,CAAC;QACxE,MAAM,cAAc,GAAI,SAAS,CAAC,aAAa,CAA6B,IAAI,EAAE,CAAC;QACnF,MAAM,UAAU,GAAI,cAAc,CAAC,aAAa,CAA6B,IAAI,EAAE,CAAC;QACpF,IAAI,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,cAAc,CAAC,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,MAAM,GAAG,cAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,iBAAiB,SAAS,KAAK,CAAC;QAChD,MAAM,QAAQ,GAAG,iCAAyB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG,QAAQ,MAAM,UAAU,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC;QAChH,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,KAAK,CAAC;YACvD,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAI,QAAQ,CAAC,KAAgB,IAAI,UAAU,CAAC;QAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;YAC3D,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,SAAS,EAAE;SAChE,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAI,QAAQ,CAAC,KAAkB,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;oBAClD,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAC1B,OAAe,EACf,OAAe,EACf,QAAiC,EACjC,KAA+B;IAE/B,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAe,IAAI,OAAO,CAAC;IACrD,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAI,QAAQ,CAAC,MAAiB,IAAI,WAAW,CAAC;QAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,MAAM,IAAI,GAAI,QAAQ,CAAC,IAA+B,IAAI,EAAE,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,IAAK,QAAQ,CAAC,WAAsB,IAAI,EAAE,CAAC;QAExE,MAAM,OAAO,GAAG,iBAAiB,SAAS,KAAK,CAAC;QAChD,MAAM,QAAQ,GAAG,iCAAyB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG;eACT,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;IAGtC,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,WAAW,KAAK,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC;QAC3G,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,SAAS,MAAM,CAAC;YAC7D,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAI,QAAQ,CAAC,KAAgB,IAAI,UAAU,CAAC;QAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,WAAW,GAAI,QAAQ,CAAC,WAAsB,IAAI,EAAE,CAAC;QAE3D,MAAM,WAAW,GAAG;eACT,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;;;IAGtC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,SAAS,MAAM,CAAC;YACnE,OAAO,EAAE,GAAG,WAAW,KAAK,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,SAAS,IAAI;SAClF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,YAAY,CAC1B,OAAe,EACf,OAAe,EACf,QAAiC,EACjC,KAA+B,EAC/B,QAAgB;IAEhB,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAe,IAAI,OAAO,CAAC;IACrD,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAI,QAAQ,CAAC,MAAiB,IAAI,WAAW,CAAC;QAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,MAAM,IAAI,GAAI,QAAQ,CAAC,IAA+B,IAAI,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAK,QAAQ,CAAC,WAAsB,IAAI,EAAE,CAAC;QAEjE,MAAM,OAAO,GAAG,iBAAiB,SAAS,KAAK,CAAC;QAChD,MAAM,QAAQ,GAAG,iCAAyB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,WAAW,GAAG,oBAAoB,SAAS,MAAM,CAAC;QACxD,MAAM,SAAS,GAAG,kBAAkB,SAAS,MAAM,CAAC;QAEpD,MAAM,WAAW,GAAG,GAAG,WAAW;aACzB,KAAK,KAAK,OAAO,IAAI,OAAO;IACrC,IAAI;;EAEN,UAAU;EACV,QAAQ;EACR,SAAS,EAAE,CAAC;QAEV,qCAAqC;QACrC,MAAM,YAAY,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,IAAI,iBAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,eAAe,GAAG,iBAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,IAAI,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;YACvE,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,IAAI,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,eAAe,IAAI,IAAI,CAAC;YAC1B,CAAC;YACD,cAAc,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,CAAC;QACjG,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAI,QAAQ,CAAC,KAAgB,IAAI,UAAU,CAAC;QAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC;YAC3D,OAAO,EAAE,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,SAAS,EAAE;SAChE,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAI,QAAQ,CAAC,KAAkB,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;oBAClD,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CACjC,OAAe,EACf,OAAe,EACf,QAAiC,EACjC,KAA+B,EAC/B,KAAe,EACf,QAAgB;IAEhB,MAAM,SAAS,GAAoB,EAAE,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAe,IAAI,OAAO,CAAC;IACrD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC;QACpE,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEpD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,mBAAmB,SAAS,gDAAgD,OAAO,KAAK,CAAC;YAC7G,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,QAAgB,EAAE,KAAe;IACrE,MAAM,aAAa,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,iBAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,iBAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAA6B;QAC5C,aAAa,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;QACrD,MAAM,EAAE,CAAC,uBAAuB,CAAC;QACjC,YAAY,EAAE,CAAC,iBAAiB,CAAC;KAClC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEpC,MAAM,WAAW,GAAG,oBAAoB,IAAI,MAAM,CAAC;QACnD,MAAM,SAAS,GAAG,kBAAkB,IAAI,MAAM,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAG,WAAW,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAErE,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;YAC1D,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,OAAO,IAAI,IAAI,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,iBAAE,CAAC,aAAa,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC"}

package/dist-mcp/core/installer.d.ts

@@ -0,0 +1,42 @@
+import { RegistryClient } from "./registry.js";
+import { HostId, TargetHost } from "../types.js";
+export interface PlanHireResult {
+    packageName: string;
+    requestedVersion: string;
+    resolvedVersion: string;
+    packageType: string;
+    targetHosts: HostId[];
+    plannedFiles: Array<{
+        path: string;
+        action: "create" | "update";
+        sha256: string;
+    }>;
+    flaggedScripts: Array<{
+        path: string;
+        warning: string;
+        preview?: string;
+    }>;
+    confirmToken: string;
+    expiresAt: string;
+    summary: string;
+}
+export interface HireResult {
+    packageName: string;
+    version: string;
+    installedFiles: string[];
+    manifestUpdated: boolean;
+    lockfileUpdated: boolean;
+    summary: string;
+}
+/**
+ * Plans a hire operation without writing anything to disk.
+ * Downloads tarball, verifies SHA-256 integrity, renders templates in memory,
+ * flags any executable scripts, and issues a short-lived confirm_token.
+ */
+export declare function planHire(packageRef: string, targetHosts?: TargetHost[], client?: RegistryClient, customRoot?: string): Promise<PlanHireResult>;
+/**
+ * Performs actual hire using a verified single-use confirm_token.
+ * Enforces security checks: valid token, directory safety, hash verification, file-only script installation.
+ */
+export declare function executeHire(packageRef: string, confirmToken: string, version?: string, targetHosts?: TargetHost[], client?: RegistryClient, customRoot?: string): Promise<HireResult>;
+//# sourceMappingURL=installer.d.ts.map

package/dist-mcp/core/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/core/installer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAA0C,MAAM,eAAe,CAAC;AAIvF,OAAO,EAAE,MAAM,EAAE,UAAU,EAA2D,MAAM,aAAa,CAAC;AAE1G,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,KAAK,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,cAAc,EAAE,KAAK,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAeD;;;;GAIG;AACH,wBAAsB,QAAQ,CAC5B,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,UAAU,EAAE,EAC1B,MAAM,CAAC,EAAE,cAAc,EACvB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,cAAc,CAAC,CAsHzB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,OAAO,CAAC,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,UAAU,EAAE,EAC1B,MAAM,CAAC,EAAE,cAAc,EACvB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CA0HrB"}