@crewdhq/crewd-mcp 0.0.0-stage → 0.1.8

package/dist-mcp/core/installer.js

@@ -0,0 +1,236 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planHire = planHire;
+exports.executeHire = executeHire;
+const node_path_1 = __importDefault(require("node:path"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const project_js_1 = require("./project.js");
+const manifest_js_1 = require("./manifest.js");
+const registry_js_1 = require("./registry.js");
+const tar_js_1 = require("./tar.js");
+const adapters_js_1 = require("./adapters.js");
+const token_js_1 = require("./token.js");
+const types_js_1 = require("../types.js");
+function resolveTargetHosts(targets, existingManifest, repoRoot) {
+    if (targets && targets.length > 0) {
+        return targets.map((t) => types_js_1.HOST_MAP[t] || t);
+    }
+    if (existingManifest && existingManifest.hosts && existingManifest.hosts.length > 0) {
+        return existingManifest.hosts;
+    }
+    if (repoRoot) {
+        return (0, project_js_1.detectHosts)(repoRoot);
+    }
+    return ["claude-code"];
+}
+/**
+ * Plans a hire operation without writing anything to disk.
+ * Downloads tarball, verifies SHA-256 integrity, renders templates in memory,
+ * flags any executable scripts, and issues a short-lived confirm_token.
+ */
+async function planHire(packageRef, targetHosts, client, customRoot) {
+    const repoRoot = customRoot || (0, project_js_1.findProjectRoot)();
+    const registryClient = client || new registry_js_1.RegistryClient();
+    const { fullName, namespace, name, versionRange } = (0, registry_js_1.parsePackageRef)(packageRef);
+    // Check package from registry
+    const pkgSummary = await registryClient.getPackage(namespace, name);
+    const isTeam = pkgSummary.type === "team";
+    const manifest = (0, manifest_js_1.readManifest)(repoRoot) || {
+        hosts: resolveTargetHosts(targetHosts, null, repoRoot),
+        crew: {},
+    };
+    const hosts = resolveTargetHosts(targetHosts, manifest, repoRoot);
+    // Prepare resolve payload
+    const existingCrew = Object.entries(manifest.crew || {}).map(([pkgName, entry]) => {
+        let range = "*";
+        let team = false;
+        if (typeof entry === "string") {
+            range = entry;
+        }
+        else if (typeof entry === "object" && entry) {
+            if ("team" in entry && typeof entry.team === "string") {
+                range = entry.team;
+                team = true;
+            }
+            else if ("version" in entry && typeof entry.version === "string") {
+                range = entry.version;
+            }
+        }
+        return { name: pkgName, range, isTeam: team };
+    });
+    // Add target package
+    const resolveList = [...existingCrew.filter((e) => e.name !== fullName), { name: fullName, range: versionRange, isTeam }];
+    const resolveRes = await registryClient.resolve(resolveList, hosts);
+    const resolvedPkgKey = Object.keys(resolveRes.packages).find((k) => k.startsWith(fullName + "@") || k === fullName);
+    if (!resolvedPkgKey || !resolveRes.packages[resolvedPkgKey]) {
+        throw new Error(`Registry failed to resolve package ${fullName}@${versionRange}`);
+    }
+    const resolvedPkg = resolveRes.packages[resolvedPkgKey];
+    // Download tarball to inspect files and scripts (in-memory only, no disk writes)
+    const tarballBuffer = await registryClient.downloadTarball(resolvedPkg.tarballUrl);
+    (0, tar_js_1.verifyTarballIntegrity)(tarballBuffer, resolvedPkg.integrity);
+    const files = await (0, tar_js_1.unpackTarballInMemory)(tarballBuffer);
+    const pkgManifest = (0, adapters_js_1.parsePackageManifestFromFiles)(files);
+    if (!pkgManifest) {
+        throw new Error(`Package ${fullName} is missing agent.yaml or skill.yaml in archive`);
+    }
+    // Detect and flag any executable scripts
+    const flaggedScripts = [];
+    const declaredScripts = pkgManifest.scripts || resolvedPkg.scripts || [];
+    for (const [filePath, file] of files.entries()) {
+        const isScript = filePath.endsWith(".sh") ||
+            filePath.startsWith("scripts/") ||
+            declaredScripts.includes(filePath) ||
+            filePath.endsWith(".bash");
+        if (isScript) {
+            const previewLines = file.content.toString("utf-8").split("\n").slice(0, 5).join("\n");
+            flaggedScripts.push({
+                path: filePath,
+                warning: "Executable script contained in package. Crewd MCP will install scripts as files only and will NEVER execute them.",
+                preview: (0, registry_js_1.sanitizeUntrustedText)(previewLines, 300),
+            });
+        }
+    }
+    // Compile files in memory
+    const generatedFiles = (0, adapters_js_1.compilePackageFiles)(fullName, resolvedPkg.version, pkgManifest, files, hosts, repoRoot);
+    const plannedFiles = [];
+    for (const gf of generatedFiles) {
+        const fullPath = node_path_1.default.join(repoRoot, gf.path);
+        const action = node_fs_1.default.existsSync(fullPath) ? "update" : "create";
+        const contentBuffer = typeof gf.content === "string" ? Buffer.from(gf.content, "utf-8") : gf.content;
+        const sha256 = node_crypto_1.default.createHash("sha256").update(contentBuffer).digest("hex");
+        plannedFiles.push({
+            path: gf.path,
+            action,
+            sha256,
+        });
+    }
+    // Generate single-use confirm token
+    const tokenData = (0, token_js_1.createConfirmToken)(fullName, resolvedPkg.version, plannedFiles.map((f) => f.path), resolvedPkg.integrity);
+    const summary = `Planned hire for ${fullName}@${resolvedPkg.version} into [${hosts.join(", ")}]. ${plannedFiles.length} files planned. ${flaggedScripts.length > 0 ? `WARNING: ${flaggedScripts.length} script(s) flagged.` : "No scripts flagged."}`;
+    return {
+        packageName: fullName,
+        requestedVersion: versionRange,
+        resolvedVersion: resolvedPkg.version,
+        packageType: resolvedPkg.type || pkgSummary.type,
+        targetHosts: hosts,
+        plannedFiles,
+        flaggedScripts,
+        confirmToken: tokenData.token,
+        expiresAt: new Date(tokenData.expiresAt).toISOString(),
+        summary,
+    };
+}
+/**
+ * Performs actual hire using a verified single-use confirm_token.
+ * Enforces security checks: valid token, directory safety, hash verification, file-only script installation.
+ */
+async function executeHire(packageRef, confirmToken, version, targetHosts, client, customRoot) {
+    const repoRoot = customRoot || (0, project_js_1.findProjectRoot)();
+    const registryClient = client || new registry_js_1.RegistryClient();
+    const { fullName, namespace, name, versionRange } = (0, registry_js_1.parsePackageRef)(packageRef);
+    // Validate and consume the confirm token
+    const tokenData = (0, token_js_1.consumeConfirmToken)(confirmToken, fullName, version);
+    const pkgSummary = await registryClient.getPackage(namespace, name);
+    const isTeam = pkgSummary.type === "team";
+    // Read manifest or create default
+    let manifest = (0, manifest_js_1.readManifest)(repoRoot);
+    if (!manifest) {
+        manifest = {
+            $schema: "https://crewd.dev/schema/manifest/v1",
+            hosts: resolveTargetHosts(targetHosts, null, repoRoot),
+            crew: {},
+        };
+    }
+    const hosts = resolveTargetHosts(targetHosts, manifest, repoRoot);
+    manifest.hosts = hosts;
+    // Add to manifest
+    const targetVersion = version || tokenData.version || versionRange;
+    manifest.crew[fullName] = isTeam ? { team: targetVersion } : targetVersion;
+    // Resolve
+    const existingCrew = Object.entries(manifest.crew).map(([pkgName, entry]) => {
+        let range = "*";
+        let team = false;
+        if (typeof entry === "string") {
+            range = entry;
+        }
+        else if (typeof entry === "object" && entry) {
+            if ("team" in entry && typeof entry.team === "string") {
+                range = entry.team;
+                team = true;
+            }
+            else if ("version" in entry && typeof entry.version === "string") {
+                range = entry.version;
+            }
+        }
+        return { name: pkgName, range, isTeam: team };
+    });
+    const resolveRes = await registryClient.resolve(existingCrew, hosts);
+    const resolvedPkgKey = Object.keys(resolveRes.packages).find((k) => k.startsWith(fullName + "@") || k === fullName);
+    if (!resolvedPkgKey || !resolveRes.packages[resolvedPkgKey]) {
+        throw new Error(`Registry failed to resolve package ${fullName}`);
+    }
+    const resolvedPkg = resolveRes.packages[resolvedPkgKey];
+    // Download tarball and verify SHA-256 integrity
+    const tarballBuffer = await registryClient.downloadTarball(resolvedPkg.tarballUrl);
+    (0, tar_js_1.verifyTarballIntegrity)(tarballBuffer, resolvedPkg.integrity);
+    const files = await (0, tar_js_1.unpackTarballInMemory)(tarballBuffer);
+    const pkgManifest = (0, adapters_js_1.parsePackageManifestFromFiles)(files);
+    if (!pkgManifest) {
+        throw new Error(`Package ${fullName} is missing agent.yaml or skill.yaml`);
+    }
+    // Compile host adapters
+    const generatedFiles = (0, adapters_js_1.compilePackageFiles)(fullName, resolvedPkg.version, pkgManifest, files, hosts, repoRoot);
+    const installedFiles = [];
+    // Write native host files safely inside repoRoot
+    for (const gf of generatedFiles) {
+        const fullPath = (0, tar_js_1.validateSafePath)(gf.path, repoRoot);
+        node_fs_1.default.mkdirSync(node_path_1.default.dirname(fullPath), { recursive: true });
+        node_fs_1.default.writeFileSync(fullPath, gf.content);
+        installedFiles.push(gf.path);
+    }
+    // Update .gitignore
+    (0, adapters_js_1.updateGitignoreBlocks)(repoRoot, hosts);
+    // Read lockfile or create new
+    let lockfile = (0, manifest_js_1.readLockfile)(repoRoot);
+    if (!lockfile) {
+        lockfile = {
+            lockfileVersion: 1,
+            manifestHash: "",
+            adapterVersions: {},
+            packages: {},
+        };
+    }
+    for (const h of hosts) {
+        lockfile.adapterVersions = lockfile.adapterVersions || {};
+        lockfile.adapterVersions[h] = 1;
+    }
+    // Update lockfile package entry
+    const lockKey = `${fullName}@${resolvedPkg.version}`;
+    lockfile.packages[lockKey] = {
+        type: resolvedPkg.type || pkgSummary.type,
+        integrity: resolvedPkg.integrity,
+        skills: resolvedPkg.skills,
+        members: resolvedPkg.members,
+        via: resolvedPkg.via,
+        scripts: resolvedPkg.scripts,
+    };
+    // Compute updated manifest hash and record in lockfile
+    lockfile.manifestHash = (0, manifest_js_1.computeManifestHash)(manifest);
+    // Atomically write crewd.json and crewd.lock
+    (0, manifest_js_1.writeManifestAtomic)(repoRoot, manifest);
+    (0, manifest_js_1.writeLockfileAtomic)(repoRoot, lockfile);
+    return {
+        packageName: fullName,
+        version: resolvedPkg.version,
+        installedFiles,
+        manifestUpdated: true,
+        lockfileUpdated: true,
+        summary: `Successfully hired ${fullName}@${resolvedPkg.version} into ${repoRoot}. ${installedFiles.length} files installed. crewd.json and crewd.lock updated.`,
+    };
+}
+//# sourceMappingURL=installer.js.map

package/dist-mcp/core/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/core/installer.ts"],"names":[],"mappings":";;;;;AA2DA,4BA2HC;AAMD,kCAiIC;AA7TD,0DAA6B;AAC7B,sDAAyB;AACzB,8DAAiC;AACjC,6CAA4D;AAC5D,+CAA0H;AAC1H,+CAAuF;AACvF,qCAA2F;AAC3F,+CAAyH;AACzH,yCAAuF;AACvF,0CAA0G;AAgC1G,SAAS,kBAAkB,CAAC,OAAsB,EAAE,gBAAuC,EAAE,QAAiB;IAC5G,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAQ,CAAC,CAAC,CAAC,IAAK,CAAuB,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,KAAK,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,OAAO,gBAAgB,CAAC,KAAiB,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAA,wBAAW,EAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,QAAQ,CAC5B,UAAkB,EAClB,WAA0B,EAC1B,MAAuB,EACvB,UAAmB;IAEnB,MAAM,QAAQ,GAAG,UAAU,IAAI,IAAA,4BAAe,GAAE,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,IAAI,IAAI,4BAAc,EAAE,CAAC;IAEtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAA,6BAAe,EAAC,UAAU,CAAC,CAAC;IAEhF,8BAA8B;IAC9B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC;IAE1C,MAAM,QAAQ,GAAG,IAAA,0BAAY,EAAC,QAAQ,CAAC,IAAI;QACzC,KAAK,EAAE,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC;QACtD,IAAI,EAAE,EAAE;KACT,CAAC;IAEF,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAElE,0BAA0B;IAC1B,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;QAChF,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC9C,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;iBAAM,IAAI,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1H,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC;IAEpH,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAExD,iFAAiF;IACjF,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACnF,IAAA,+BAAsB,EAAC,aAAa,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAqB,EAAC,aAAa,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAA,2CAA6B,EAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,iDAAiD,CAAC,CAAC;IACxF,CAAC;IAED,yCAAyC;IACzC,MAAM,cAAc,GAA+D,EAAE,CAAC;IACtF,MAAM,eAAe,GAAI,WAAW,CAAC,OAAoB,IAAI,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;IAEvF,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GACZ,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxB,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAC/B,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE7B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvF,cAAc,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mHAAmH;gBAC5H,OAAO,EAAE,IAAA,mCAAqB,EAAC,YAAY,EAAE,GAAG,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,MAAM,cAAc,GAAG,IAAA,iCAAmB,EAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE/G,MAAM,YAAY,GAAyE,EAAE,CAAC;IAC9F,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7D,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC;QACrG,MAAM,MAAM,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/E,YAAY,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM;YACN,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,MAAM,SAAS,GAAG,IAAA,6BAAkB,EAClC,QAAQ,EACR,WAAW,CAAC,OAAO,EACnB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAC/B,WAAW,CAAC,SAAS,CACtB,CAAC;IAEF,MAAM,OAAO,GAAG,oBAAoB,QAAQ,IAAI,WAAW,CAAC,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAC3F,YAAY,CAAC,MACf,mBAAmB,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,cAAc,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;IAEhI,OAAO;QACL,WAAW,EAAE,QAAQ;QACrB,gBAAgB,EAAE,YAAY;QAC9B,eAAe,EAAE,WAAW,CAAC,OAAO;QACpC,WAAW,EAAE,WAAW,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QAChD,WAAW,EAAE,KAAK;QAClB,YAAY;QACZ,cAAc;QACd,YAAY,EAAE,SAAS,CAAC,KAAK;QAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACtD,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,YAAoB,EACpB,OAAgB,EAChB,WAA0B,EAC1B,MAAuB,EACvB,UAAmB;IAEnB,MAAM,QAAQ,GAAG,UAAU,IAAI,IAAA,4BAAe,GAAE,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,IAAI,IAAI,4BAAc,EAAE,CAAC;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAA,6BAAe,EAAC,UAAU,CAAC,CAAC;IAEhF,yCAAyC;IACzC,MAAM,SAAS,GAAG,IAAA,8BAAmB,EAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEvE,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC;IAE1C,kCAAkC;IAClC,IAAI,QAAQ,GAAG,IAAA,0BAAY,EAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG;YACT,OAAO,EAAE,sCAAsC;YAC/C,KAAK,EAAE,kBAAkB,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC;YACtD,IAAI,EAAE,EAAE;SACT,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IAEvB,kBAAkB;IAClB,MAAM,aAAa,GAAG,OAAO,IAAI,SAAS,CAAC,OAAO,IAAI,YAAY,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IAE3E,UAAU;IACV,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE;QAC1E,IAAI,KAAK,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC9C,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;gBACnB,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;iBAAM,IAAI,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC;IAEpH,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAExD,gDAAgD;IAChD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACnF,IAAA,+BAAsB,EAAC,aAAa,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAqB,EAAC,aAAa,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAA,2CAA6B,EAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,sCAAsC,CAAC,CAAC;IAC7E,CAAC;IAED,wBAAwB;IACxB,MAAM,cAAc,GAAG,IAAA,iCAAmB,EAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE/G,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,iDAAiD;IACjD,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,iBAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QACvC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,oBAAoB;IACpB,IAAA,mCAAqB,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEvC,8BAA8B;IAC9B,IAAI,QAAQ,GAAG,IAAA,0BAAY,EAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG;YACT,eAAe,EAAE,CAAC;YAClB,YAAY,EAAE,EAAE;YAChB,eAAe,EAAE,EAAE;YACnB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,QAAQ,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QAC1D,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG;QAC3B,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QACzC,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,GAAG,EAAE,WAAW,CAAC,GAAG;QACpB,OAAO,EAAE,WAAW,CAAC,OAAO;KAC7B,CAAC;IAEF,uDAAuD;IACvD,QAAQ,CAAC,YAAY,GAAG,IAAA,iCAAmB,EAAC,QAAQ,CAAC,CAAC;IAEtD,6CAA6C;IAC7C,IAAA,iCAAmB,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAA,iCAAmB,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAExC,OAAO;QACL,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,cAAc;QACd,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,sBAAsB,QAAQ,IAAI,WAAW,CAAC,OAAO,SAAS,QAAQ,KAAK,cAAc,CAAC,MAAM,sDAAsD;KAChK,CAAC;AACJ,CAAC"}

package/dist-mcp/core/manifest.d.ts

@@ -0,0 +1,17 @@
+import { CrewdManifest, CrewdLockfile } from "../types.js";
+export declare const DEFAULT_MANIFEST_SCHEMA = "https://crewd.dev/schema/manifest/v1";
+export declare function readManifest(repoRoot: string): CrewdManifest | null;
+export declare function readLockfile(repoRoot: string): CrewdLockfile | null;
+/**
+ * Computes canonical deterministic SHA-256 hash matching Go CLI implementation.
+ */
+export declare function computeManifestHash(m: CrewdManifest): string;
+/**
+ * Writes crewd.json atomically.
+ */
+export declare function writeManifestAtomic(repoRoot: string, manifest: CrewdManifest): void;
+/**
+ * Writes crewd.lock atomically.
+ */
+export declare function writeLockfileAtomic(repoRoot: string, lockfile: CrewdLockfile): void;
+//# sourceMappingURL=manifest.d.ts.map

package/dist-mcp/core/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/core/manifest.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3D,eAAO,MAAM,uBAAuB,yCAAyC,CAAC;AAE9E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAWnE;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAWnE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAmC5D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAkCnF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,CAenF"}

package/dist-mcp/core/manifest.js

@@ -0,0 +1,128 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_MANIFEST_SCHEMA = void 0;
+exports.readManifest = readManifest;
+exports.readLockfile = readLockfile;
+exports.computeManifestHash = computeManifestHash;
+exports.writeManifestAtomic = writeManifestAtomic;
+exports.writeLockfileAtomic = writeLockfileAtomic;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_crypto_1 = __importDefault(require("node:crypto"));
+const yaml_1 = __importDefault(require("yaml"));
+exports.DEFAULT_MANIFEST_SCHEMA = "https://crewd.dev/schema/manifest/v1";
+function readManifest(repoRoot) {
+    const filePath = node_path_1.default.join(repoRoot, "crewd.json");
+    if (!node_fs_1.default.existsSync(filePath)) {
+        return null;
+    }
+    try {
+        const raw = node_fs_1.default.readFileSync(filePath, "utf-8");
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Failed to parse crewd.json: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+function readLockfile(repoRoot) {
+    const filePath = node_path_1.default.join(repoRoot, "crewd.lock");
+    if (!node_fs_1.default.existsSync(filePath)) {
+        return null;
+    }
+    try {
+        const raw = node_fs_1.default.readFileSync(filePath, "utf-8");
+        return yaml_1.default.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Failed to parse crewd.lock: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Computes canonical deterministic SHA-256 hash matching Go CLI implementation.
+ */
+function computeManifestHash(m) {
+    const sortedHosts = [...(m.hosts || [])].sort();
+    const sortedTeach = {};
+    if (m.teach) {
+        const teachKeys = Object.keys(m.teach).sort();
+        for (const k of teachKeys) {
+            sortedTeach[k] = [...m.teach[k]].sort();
+        }
+    }
+    // Sort crew entries by package name
+    const sortedCrew = {};
+    if (m.crew) {
+        const crewKeys = Object.keys(m.crew).sort();
+        for (const k of crewKeys) {
+            sortedCrew[k] = m.crew[k];
+        }
+    }
+    const ordered = {};
+    if (m.$schema) {
+        ordered["$schema"] = m.$schema;
+    }
+    ordered["hosts"] = sortedHosts;
+    ordered["crew"] = sortedCrew;
+    if (m.teach && Object.keys(m.teach).length > 0) {
+        ordered["teach"] = sortedTeach;
+    }
+    if (m.memory) {
+        ordered["memory"] = m.memory;
+    }
+    const jsonStr = JSON.stringify(ordered, null, "  ") + "\n";
+    return node_crypto_1.default.createHash("sha256").update(jsonStr, "utf-8").digest("hex");
+}
+/**
+ * Writes crewd.json atomically.
+ */
+function writeManifestAtomic(repoRoot, manifest) {
+    const targetPath = node_path_1.default.join(repoRoot, "crewd.json");
+    const tmpPath = node_path_1.default.join(repoRoot, `.crewd-manifest-${Date.now()}-${Math.random().toString(36).substring(2)}.tmp`);
+    // Ensure deterministic formatting
+    const sortedHosts = [...(manifest.hosts || [])].sort();
+    const sortedCrew = {};
+    if (manifest.crew) {
+        for (const k of Object.keys(manifest.crew).sort()) {
+            sortedCrew[k] = manifest.crew[k];
+        }
+    }
+    const ordered = {
+        $schema: manifest.$schema || exports.DEFAULT_MANIFEST_SCHEMA,
+        hosts: sortedHosts,
+        crew: sortedCrew,
+    };
+    if (manifest.teach && Object.keys(manifest.teach).length > 0) {
+        const sortedTeach = {};
+        for (const k of Object.keys(manifest.teach).sort()) {
+            sortedTeach[k] = [...manifest.teach[k]].sort();
+        }
+        ordered["teach"] = sortedTeach;
+    }
+    if (manifest.memory) {
+        ordered["memory"] = manifest.memory;
+    }
+    const content = JSON.stringify(ordered, null, "  ") + "\n";
+    node_fs_1.default.writeFileSync(tmpPath, content, "utf-8");
+    node_fs_1.default.renameSync(tmpPath, targetPath);
+}
+/**
+ * Writes crewd.lock atomically.
+ */
+function writeLockfileAtomic(repoRoot, lockfile) {
+    const targetPath = node_path_1.default.join(repoRoot, "crewd.lock");
+    const tmpPath = node_path_1.default.join(repoRoot, `.crewd-lock-${Date.now()}-${Math.random().toString(36).substring(2)}.tmp`);
+    // Format lockfile as clean YAML with 2 spaces
+    const doc = new yaml_1.default.Document({
+        lockfileVersion: lockfile.lockfileVersion || 1,
+        manifestHash: lockfile.manifestHash,
+        adapterVersions: lockfile.adapterVersions || {},
+        packages: lockfile.packages || {},
+    });
+    const content = doc.toString({ indent: 2 });
+    node_fs_1.default.writeFileSync(tmpPath, content, "utf-8");
+    node_fs_1.default.renameSync(tmpPath, targetPath);
+}
+//# sourceMappingURL=manifest.js.map

package/dist-mcp/core/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/core/manifest.ts"],"names":[],"mappings":";;;;;;AAQA,oCAWC;AAED,oCAWC;AAKD,kDAmCC;AAKD,kDAkCC;AAKD,kDAeC;AAnID,sDAAyB;AACzB,0DAA6B;AAC7B,8DAAiC;AACjC,gDAAwB;AAGX,QAAA,uBAAuB,GAAG,sCAAsC,CAAC;AAE9E,SAAgB,YAAY,CAAC,QAAgB;IAC3C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,QAAgB;IAC3C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,cAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,CAAgB;IAClD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,WAAW,GAA6B,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;IAC/B,OAAO,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC;IAC7B,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3D,OAAO,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,QAAuB;IAC3E,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEpH,kCAAkC;IAClC,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA4B;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,+BAAuB;QACpD,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,UAAU;KACjB,CAAC;IAEF,IAAI,QAAQ,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,WAAW,GAA6B,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3D,iBAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,iBAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,QAAuB;IAC3E,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEhH,8CAA8C;IAC9C,MAAM,GAAG,GAAG,IAAI,cAAI,CAAC,QAAQ,CAAC;QAC5B,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,CAAC;QAC9C,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,EAAE;QAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;KAClC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,iBAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5C,iBAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC"}

package/dist-mcp/core/project.d.ts

@@ -0,0 +1,11 @@
+import { HostId } from "../types.js";
+/**
+ * Finds the project root by searching upwards from startDir for crewd.json or .git.
+ * If neither is found, returns startDir (or process.cwd()).
+ */
+export declare function findProjectRoot(startDir?: string): string;
+/**
+ * Detects which host environments are present in the repo root.
+ */
+export declare function detectHosts(repoRoot: string): HostId[];
+//# sourceMappingURL=project.d.ts.map

package/dist-mcp/core/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/core/project.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAc,MAAM,aAAa,CAAC;AAEjD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAsBzD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CA6BtD"}

package/dist-mcp/core/project.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findProjectRoot = findProjectRoot;
+exports.detectHosts = detectHosts;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Finds the project root by searching upwards from startDir for crewd.json or .git.
+ * If neither is found, returns startDir (or process.cwd()).
+ */
+function findProjectRoot(startDir) {
+    let curr = node_path_1.default.resolve(startDir || process.cwd());
+    while (true) {
+        const crewdJson = node_path_1.default.join(curr, "crewd.json");
+        if (node_fs_1.default.existsSync(crewdJson)) {
+            return curr;
+        }
+        const gitDir = node_path_1.default.join(curr, ".git");
+        if (node_fs_1.default.existsSync(gitDir)) {
+            return curr;
+        }
+        const parent = node_path_1.default.dirname(curr);
+        if (parent === curr) {
+            break;
+        }
+        curr = parent;
+    }
+    return node_path_1.default.resolve(startDir || process.cwd());
+}
+/**
+ * Detects which host environments are present in the repo root.
+ */
+function detectHosts(repoRoot) {
+    const detected = [];
+    // Claude Code
+    if (node_fs_1.default.existsSync(node_path_1.default.join(repoRoot, ".claude")) ||
+        node_fs_1.default.existsSync(node_path_1.default.join(repoRoot, "CLAUDE.md"))) {
+        detected.push("claude-code");
+    }
+    // Cursor
+    if (node_fs_1.default.existsSync(node_path_1.default.join(repoRoot, ".cursor"))) {
+        detected.push("cursor");
+    }
+    // Gemini CLI / Antigravity IDE
+    if (node_fs_1.default.existsSync(node_path_1.default.join(repoRoot, ".gemini")) ||
+        node_fs_1.default.existsSync(node_path_1.default.join(repoRoot, "GEMINI.md"))) {
+        detected.push("gemini-cli");
+    }
+    if (detected.length === 0) {
+        return ["claude-code"];
+    }
+    return detected;
+}
+//# sourceMappingURL=project.js.map

package/dist-mcp/core/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/core/project.ts"],"names":[],"mappings":";;;;;AAQA,0CAsBC;AAKD,kCA6BC;AAhED,sDAAyB;AACzB,0DAA6B;AAG7B;;;GAGG;AACH,SAAgB,eAAe,CAAC,QAAiB;IAC/C,IAAI,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEnD,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,iBAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,iBAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM;QACR,CAAC;QACD,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,mBAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,QAAgB;IAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,cAAc;IACd,IACE,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;IAED,SAAS;IACT,IAAI,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,+BAA+B;IAC/B,IACE,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7C,iBAAE,CAAC,UAAU,CAAC,mBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAC/C,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist-mcp/core/registry.d.ts

@@ -0,0 +1,36 @@
+import { PackageSummary, VersionDetail, ResolveResponse } from "../types.js";
+export declare const DEFAULT_REGISTRY_URL = "https://api.crewd.dev";
+export declare function loadRegistryConfig(): {
+    registryUrl: string;
+    token?: string;
+};
+export declare function parsePackageRef(ref: string): {
+    fullName: string;
+    namespace: string;
+    name: string;
+    versionRange: string;
+};
+/**
+ * Sanitizes untrusted text from package manifests, readmes, and descriptions.
+ * Truncates overly long fields and strips control characters.
+ */
+export declare function sanitizeUntrustedText(text: string | undefined | null, maxLen?: number): string;
+export declare class RegistryClient {
+    private baseUrl;
+    private token?;
+    constructor(baseUrl?: string, token?: string);
+    private getHeaders;
+    searchPackages(query: string, kind?: string, limit?: number): Promise<{
+        packages: PackageSummary[];
+        total: number;
+    }>;
+    getPackage(namespace: string, name: string): Promise<PackageSummary>;
+    getVersion(namespace: string, name: string, version: string): Promise<VersionDetail>;
+    resolve(packages: Array<{
+        name: string;
+        range: string;
+        isTeam?: boolean;
+    }>, hosts?: string[]): Promise<ResolveResponse>;
+    downloadTarball(tarballUrl: string): Promise<Buffer>;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist-mcp/core/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AAE9F,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D,wBAAgB,kBAAkB,IAAI;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAgC5E;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAkBxH;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,MAAM,SAAM,GAAG,MAAM,CAQ3F;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAC,CAAS;gBAEX,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;IAM5C,OAAO,CAAC,UAAU;IAWZ,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA+BpH,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAyBpE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA2BpF,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;IAiCvH,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAmB3D"}