@crewx/sdk 0.9.0-rc.46 → 0.9.0-rc.49

package/dist/provider/acp/meta.d.ts

@@ -1,3 +1,4 @@
+import type { ProviderDefaultProfile } from '../models.js';
 import type { InitializeResponse, NewSessionResponse } from './types.js';
 export interface AcpProviderMetaResult {
     id: string;
@@ -16,6 +17,7 @@ export interface AcpProviderMetaResult {
         effort?: string[];
         defaultEffort?: string;
     }>;
+    defaults?: ProviderDefaultProfile;
     capabilities: Record<string, boolean>;
 }
 declare function extractProviderMeta(adapterId: string, displayName: string | undefined, initResponse: InitializeResponse, sessionResponse: NewSessionResponse): AcpProviderMetaResult;

package/dist/provider/models.d.ts

@@ -1,9 +1,12 @@
-import { type ModelCatalogEntry, type ProviderCatalogEntry, type ProviderModeEntry, type ProviderModelOverride } from '../config/models.generated.js';
-export type { ModelCatalogEntry, ProviderCatalogEntry, ProviderModeEntry, ProviderModelOverride, } from '../config/models.generated.js';
+import { type ModelCatalogEntry, type ProviderCatalogEntry, type ProviderDefaultProfile, type ProviderModeEntry, type ProviderModelOverride } from '../config/models.generated.js';
+export type { ModelCatalogEntry, ProviderCatalogEntry, ProviderDefaultProfile, ProviderDefaults, ProviderModeEntry, ProviderModelOverride, } from '../config/models.generated.js';
 export declare function setModelsOverride(providers: Record<string, ProviderCatalogEntry | ModelCatalogEntry[]>): void;
 export declare function clearModelsOverride(): void;
+export declare function setModelsDefaultsOverride(providers: Record<string, ProviderDefaultProfile>): void;
+export declare function clearModelsDefaultsOverride(): void;
 export declare function getProviderModels(provider: string): ModelCatalogEntry[];
 export declare function getProviderCatalog(provider: string): ProviderCatalogEntry;
+export declare function getProviderDefaultProfile(provider: string): ProviderDefaultProfile | undefined;
 export declare function getProviderModes(provider: string): ProviderModeEntry[];
 export declare function getProviderEffort(provider: string, model?: string): string[];
 export declare function getProviderModelOverrides(provider: string): Record<string, ProviderModelOverride>;

package/dist/publish/auth-boundary.d.ts

@@ -0,0 +1,22 @@
+export type AccountAuthBoundaryErrorCode = 'ACCOUNT_USER_PAIR_MISSING' | 'ACCOUNT_USER_ISSUER_MISSING' | 'ACCOUNT_USER_ANON_KEY_MISSING' | 'ACCOUNT_ACCESS_TOKEN_INVALID' | 'ACCOUNT_TOKEN_ISSUER_MISMATCH' | 'ACCOUNT_TOKEN_SUB_MISMATCH' | 'ACCOUNT_AUTH_JSON_ISSUER_MISMATCH' | 'ACCOUNT_AUTH_JSON_SUB_MISMATCH';
+export declare class AccountAuthBoundaryError extends Error {
+    readonly code: AccountAuthBoundaryErrorCode;
+    constructor(code: AccountAuthBoundaryErrorCode, message: string);
+}
+export interface UserAccountConfig {
+    issuer: string;
+    anonKey: string;
+}
+export declare function resolveUserAccountConfig(env?: Readonly<Record<string, string | undefined>>): UserAccountConfig;
+export interface AccessTokenIdentity {
+    issuer: string;
+    sub: string;
+}
+export declare function decodeAccessTokenIdentity(accessToken: string): AccessTokenIdentity;
+export declare function assertUserRealmAccessToken(accessToken: string, config: Pick<UserAccountConfig, 'issuer'>, expectedSub?: string): AccessTokenIdentity;
+export interface AuthJsonIdentity {
+    issuer: string;
+    sub: string;
+    access_token: string;
+}
+export declare function assertAuthJsonUserRealm(auth: AuthJsonIdentity, config: Pick<UserAccountConfig, 'issuer'>): AccessTokenIdentity;

package/dist/publish/auth-json.d.ts

@@ -0,0 +1,11 @@
+export interface AuthJson {
+    version: 1;
+    issuer: string;
+    sub: string;
+    email: string;
+    access_token: string;
+    refresh_token: string;
+    expires_at: number;
+    updated_at: string;
+}
+export declare function readAuthJson(): AuthJson;

package/dist/publish/constants.d.ts

@@ -0,0 +1,6 @@
+export interface ExcludeRuleDef {
+    label: string;
+    test(basename: string, relPath: string, isDir: boolean): boolean;
+}
+export declare const EXCLUDE_RULES: ExcludeRuleDef[];
+export declare function matchExclude(basename: string, relPath: string, isDir: boolean): string | null;

package/dist/publish/index.d.ts

@@ -0,0 +1,30 @@
+import type { ExcludedEntry } from './scan';
+import type { SecretFinding } from './secrets';
+import type { PublishManifest } from './manifest';
+import { uploadToMarketplace } from './upload';
+import type { PublishUploadOptions, PublishUploadResult } from './upload';
+export interface PublishOptions {
+    version?: string;
+}
+export interface PublishPlan {
+    manifest: PublishManifest;
+    included: string[];
+    excluded: ExcludedEntry[];
+    secretFindings: SecretFinding[];
+}
+export declare function planPublish(dir: string, opts?: PublishOptions): Promise<PublishPlan>;
+export declare function packTemplate(dir: string, opts?: PublishOptions): Promise<{
+    manifest: PublishManifest;
+    tgzPath: string;
+}>;
+export type { PublishManifest, ManifestFile, BuildManifestOptions } from './manifest';
+export type { ExcludedEntry, ScanResult } from './scan';
+export type { SecretFinding } from './secrets';
+export { EXCLUDE_RULES } from './constants';
+export { uploadToMarketplace };
+export type { PublishUploadOptions, PublishUploadResult };
+export { readAuthJson } from './auth-json';
+export type { AuthJson } from './auth-json';
+export { AccountAuthBoundaryError, assertAuthJsonUserRealm, assertUserRealmAccessToken, decodeAccessTokenIdentity, resolveUserAccountConfig, } from './auth-boundary';
+export type { AccessTokenIdentity, AccountAuthBoundaryErrorCode, AuthJsonIdentity, UserAccountConfig, } from './auth-boundary';
+export { MARKETPLACE_API_PREFIX } from './marketplace-api.constants';

package/dist/publish/index.js

@@ -0,0 +1 @@
+'use strict';var y=require('path'),d=require('fs'),G=require('crypto'),W=require('js-yaml'),O=require('os'),Y=require('tar'),zlib=require('zlib');function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var y__namespace=/*#__PURE__*/_interopNamespace(y);var d__namespace=/*#__PURE__*/_interopNamespace(d);var G__namespace=/*#__PURE__*/_interopNamespace(G);var W__namespace=/*#__PURE__*/_interopNamespace(W);var O__namespace=/*#__PURE__*/_interopNamespace(O);var Y__namespace=/*#__PURE__*/_interopNamespace(Y);function ae(e){let t=n=>n.replace(/[.+^${}()|[\]\\]/g,"\\$&"),s=e.split("/").map(n=>n==="**"?".*":n.split("*").map(t).join("[^/]*"));return new RegExp(`^${s.join("\\/")}$`)}function E(e,t){try{return ae(t).test(e)}catch{return  false}}function P(e,...t){let r=e.split("/");if(r.length<t.length)return  false;let s=r.length-t.length;return t.every((n,i)=>E(r[s+i],n))}function ce(e,t){return e.split("/").some(r=>E(r,t))}var z=[{label:".env*",test:e=>E(e,".env*")},{label:".git/",test:(e,t,r)=>r&&e===".git"},{label:"memory/",test:(e,t,r)=>r&&e==="memory"},{label:"*.key",test:e=>E(e,"*.key")},{label:"*.pem",test:e=>E(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,t,r)=>r&&e==="node_modules"},{label:"conversations/",test:(e,t,r)=>r&&e==="conversations"},{label:".crewx/threads/",test:(e,t,r)=>r&&P(t,".crewx","threads")},{label:".crewx/crewx.db",test:(e,t,r)=>!r&&P(t,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,t,r)=>!r&&P(t,".crewx","*.log")},{label:".crewx/publish/",test:(e,t,r)=>r&&P(t,".crewx","publish")},{label:".crewx/",test:(e,t)=>ce(t,".crewx")}];function U(e,t,r){for(let s of z)if(s.test(e,t,r))return s.label;return null}function J(e){let t=[],r=[];function s(n,i,a){let m;try{m=d__namespace.readdirSync(n,{withFileTypes:!0});}catch{return}m.sort((c,u)=>c.name.localeCompare(u.name));for(let c of m){let u=i?`${i}/${c.name}`:c.name,p=y__namespace.join(n,c.name);if(c.isSymbolicLink()){let l;try{l=d__namespace.statSync(p);}catch{continue}if(l.isDirectory()){r.push({path:u,rule:a??"symlink-dir"});continue}let C=a??U(c.name,u,false);C?r.push({path:u,rule:C}):t.push(u);continue}if(c.isDirectory()){let l=a??U(c.name,u,true);s(p,u,l);continue}if(c.isFile()){let l=a??U(c.name,u,false);l?r.push({path:u,rule:l}):t.push(u);}}}return s(e,"",null),t.sort(),r.sort((n,i)=>n.path<i.path?-1:n.path>i.path?1:0),{included:t,excluded:r}}var ue=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function pe(e){return e.includes(0)}function L(e,t){let r=[];for(let s of t){let n=y__namespace.join(e,s),i;try{i=d__namespace.readFileSync(n);}catch{continue}if(pe(i))continue;i.toString("utf8").split(/\r\n|\r|\n/).forEach((m,c)=>{for(let{rule:u,regex:p}of ue)p.test(m)&&r.push({path:s,line:c+1,rule:u});});}return r}var X=/^[a-z0-9-]+$/,le=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,fe=/^[A-Za-z_][A-Za-z0-9_]*$/;function me(e){let t=y__namespace.join(e,"crewx.yaml");if(!d__namespace.existsSync(t))return {};let r;try{r=W__namespace.load(d__namespace.readFileSync(t,"utf8"));}catch{return {}}if(!r||typeof r!="object")return {};let s=r.metadata;if(!s||typeof s!="object")return {};let n=s;return {name:typeof n.name=="string"?n.name:void 0,version:typeof n.version=="string"?n.version:void 0,description:typeof n.description=="string"?n.description:void 0,requiredEnv:n.requiredEnv,crewxMinVersion:typeof n.crewxMinVersion=="string"?n.crewxMinVersion:void 0}}function he(e){return G__namespace.createHash("sha256").update(new Uint8Array(d__namespace.readFileSync(e))).digest("hex")}function q(e,t,r={}){let s=me(e),n=s.name??y__namespace.basename(e);if(!X.test(n))throw new Error(`publish: invalid name "${n}" \u2014 must match ${X} (lowercase letters, numbers, hyphen only)`);let i=r.version??s.version;if(!i)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");if(!le.test(i))throw new Error(`publish: invalid version "${i}" \u2014 must be semver (e.g. 1.0.0)`);let a=Array.isArray(s.requiredEnv)?s.requiredEnv:[],m=[];for(let p of a){if(typeof p!="string"||!fe.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);m.push(p);}let c=t.map(p=>({path:p,sha256:he(y__namespace.join(e,p))})).sort((p,l)=>p.path<l.path?-1:p.path>l.path?1:0),u={name:n,version:i,type:"template",description:s.description??"",files:c,requiredEnv:m};return s.crewxMinVersion&&(u.crewxMinVersion=s.crewxMinVersion),u}async function Q(e,t){let r=y__namespace.join(e,".crewx","publish");d__namespace.mkdirSync(r,{recursive:true});let s=y__namespace.join(r,`${t.name}-${t.version}.tgz`),n=d__namespace.mkdtempSync(y__namespace.join(O__namespace.tmpdir(),"crewx-publish-"));try{d__namespace.writeFileSync(y__namespace.join(n,"manifest.json"),JSON.stringify(t,null,2));for(let i of t.files){let a=y__namespace.join(n,i.path);d__namespace.mkdirSync(y__namespace.dirname(a),{recursive:!0}),d__namespace.copyFileSync(y__namespace.join(e,i.path),a);}await Y__namespace.create({gzip:!0,file:s,cwd:n,portable:!0,noMtime:!0},["manifest.json",...t.files.map(i=>i.path)]);}finally{d__namespace.rmSync(n,{recursive:true,force:true});}return s}var A="/api/v1";var ye=201,be=409,I=401;function we(){return process.env.WI013_FAKE_UPLOAD==="1"}function Ee(e){let t=zlib.gunzipSync(new Uint8Array(e)),r=zlib.gzipSync(new Uint8Array(t),{level:1});if(Buffer.compare(new Uint8Array(r),new Uint8Array(e))===0)throw new Error("WI013_FAKE_UPLOAD: re-gzipped bytes are identical to the original \u2014 tamper is a no-op");return r}function Ae(e){return e.replace(/\/+$/,"")}async function v(e){try{return await e.json()}catch{return null}}function b(e){let t=e?.message;return typeof t=="string"?t:void 0}function ee(e,t,r){let s=e;if(!s||s.success!==true||s.data===void 0)throw new Error(`publish: ${t} response envelope malformed (expected { success: true, data }) \u2014 HTTP ${r}`);return s.data}async function Se(e){let t=Ae(e.baseUrl),r=e.accessPolicy??"private",s=e.manifest.name,n;try{n=await fetch(`${t}${A}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:s,displayName:s,description:e.manifest.description,type:"template",version:e.manifest.version,accessPolicy:r})});}catch(o){throw new Error(`publish: submit \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uB124\uD2B8\uC6CC\uD06C) \u2014 ${o instanceof Error?o.message:String(o)}`)}let i;if(n.status===ye)i="created";else if(n.status===be)i="existing";else {if(n.status===I)throw new Error("publish: \uC778\uC99D\uC774 \uB9CC\uB8CC\uB418\uC5C8\uAC70\uB098 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uB2E4\uC2DC \uB85C\uADF8\uC778\uD558\uC138\uC694");{let o=await v(n);throw new Error(`publish: submit \uC2E4\uD328 \u2014 HTTP ${n.status}${b(o)?` ${b(o)}`:""}`)}}let a="not-needed",m=null;if(i==="existing"){let o;try{o=await fetch(`${t}${A}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch(f){throw new Error(`publish: version \uC870\uD68C \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uB124\uD2B8\uC6CC\uD06C) \u2014 ${f instanceof Error?f.message:String(f)}`)}let M=await v(o);if(o.status!==200)throw new Error(`publish: publisher items \uC870\uD68C \uC2E4\uD328 \u2014 HTTP ${o.status}${b(M)?` ${b(M)}`:""}`);let H=ee(M,"publisher items",o.status)?.items;if(!Array.isArray(H))throw new Error(`publish: publisher items response malformed (expected data.items[]) \u2014 HTTP ${o.status}`);let $=H.find(f=>!f||typeof f!="object"?false:f.slug===s);if(!$||typeof $.version!="string")throw new Error(`publish: publisher items response does not contain slug "${s}" \u2014 HTTP ${o.status}`);if(m=$.version,m!==e.manifest.version){let f;try{f=await fetch(`${t}${A}/publisher/items/${encodeURIComponent(s)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch(x){throw new Error(`publish: version update \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uB124\uD2B8\uC6CC\uD06C) \u2014 ${x instanceof Error?x.message:String(x)}`)}if(!f.ok){let x=await v(f),w=b(x);throw f.status===I?new Error(`publish: version update \uC778\uC99D\uC774 \uB9CC\uB8CC\uB418\uC5C8\uAC70\uB098 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uB2E4\uC2DC \uB85C\uADF8\uC778\uD558\uC138\uC694 (HTTP ${f.status})${w?` ${w}`:""}`):f.status===403?new Error(`publish: version update \uAD8C\uD55C\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uAE30\uC874 \uD56D\uBAA9\uC758 \uC18C\uC720\uC790\uB9CC \uBC84\uC804\uC744 \uAC31\uC2E0\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4 (HTTP ${f.status})${w?` ${w}`:""}`):new Error(`publish: version update \uC2E4\uD328 \u2014 HTTP ${f.status}${w?` ${w}`:""}`)}a="applied";}}let c=d__namespace.readFileSync(e.tgzPath),u=we()?Ee(c):c,p=new FormData;p.set("archive",new Blob([new Uint8Array(u)],{type:"application/gzip"}),`${s}-${e.manifest.version}.tgz`);let l;try{l=await fetch(`${t}${A}/publisher/items/${encodeURIComponent(s)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:p});}catch(o){throw new Error(`publish: upload \uC694\uCCAD\uC774 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (\uB124\uD2B8\uC6CC\uD06C) \u2014 ${o instanceof Error?o.message:String(o)}`)}if(l.status===I)throw new Error("publish: \uC778\uC99D\uC774 \uB9CC\uB8CC\uB418\uC5C8\uAC70\uB098 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 \uB2E4\uC2DC \uB85C\uADF8\uC778\uD558\uC138\uC694");if(!l.ok){let o=await v(l);throw new Error(`publish: upload \uC2E4\uD328 \u2014 HTTP ${l.status}${b(o)?` ${b(o)}`:""}`)}let C=await v(l),F=ee(C,"upload",l.status);return {slug:s,version:e.manifest.version,artifactChecksum:F.artifactChecksum,artifactSizeBytes:F.artifactSizeBytes,submitOutcome:i,versionUpdate:a,serverVersionBefore:m}}function ne(){if(process.env.CREWX_HOME)try{return d__namespace.realpathSync(process.env.CREWX_HOME)}catch{return y__namespace.join(O__namespace.homedir(),".crewx")}return process.platform!=="win32"&&process.env.XDG_CONFIG_HOME?y__namespace.join(process.env.XDG_CONFIG_HOME,"crewx"):y__namespace.join(O__namespace.homedir(),".crewx")}var g=class extends Error{code;constructor(t,r){super(r),this.name="AccountAuthBoundaryError",this.code=t;}};function N(e=process.env){let t=e.CREWX_ACCOUNT_ISSUER?.trim(),r=e.CREWX_ACCOUNT_ANON_KEY?.trim();if(!t&&!r)throw new g("ACCOUNT_USER_PAIR_MISSING","CrewX user-realm issuer\uC640 anon/publishable key pair \uC124\uC815\uC774 \uC5C6\uC2B5\uB2C8\uB2E4");if(!t)throw new g("ACCOUNT_USER_ISSUER_MISSING","CrewX user-realm issuer \uC124\uC815\uC774 \uC5C6\uC2B5\uB2C8\uB2E4");if(!r)throw new g("ACCOUNT_USER_ANON_KEY_MISSING","CrewX user-realm anon/publishable key \uC124\uC815\uC774 \uC5C6\uC2B5\uB2C8\uB2E4");return {issuer:t,anonKey:r}}function S(){throw new g("ACCOUNT_ACCESS_TOKEN_INVALID","\uACC4\uC815 access token\uC744 \uAC80\uC99D\uD560 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4")}function se(e){try{return JSON.parse(Buffer.from(e,"base64url").toString("utf8"))}catch{return S()}}function ie(e){if(typeof e!="string")return S();let t=e.split(".");if(t.length!==3||t.some(i=>i.length===0))return S();let r=se(t[0]),s=se(t[1]);if(!r||typeof r!="object"||!s||typeof s!="object")return S();let n=s;return typeof n.iss!="string"||n.iss.length===0||typeof n.sub!="string"||n.sub.length===0?S():{issuer:n.iss,sub:n.sub}}function oe(e,t,r){let s=ie(e);if(s.issuer!==t.issuer)throw new g("ACCOUNT_TOKEN_ISSUER_MISMATCH","\uACC4\uC815 access token\uC774 \uC124\uC815\uB41C user realm\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");if(r!==void 0&&s.sub!==r)throw new g("ACCOUNT_TOKEN_SUB_MISMATCH","\uACC4\uC815 access token\uC758 subject\uAC00 \uC608\uC0C1 \uC2E0\uC6D0\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");return s}function j(e,t){if(e.issuer!==t.issuer)throw new g("ACCOUNT_AUTH_JSON_ISSUER_MISMATCH","auth.json\uC774 \uC124\uC815\uB41C user realm\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");let r=oe(e.access_token,t);if(r.sub!==e.sub)throw new g("ACCOUNT_AUTH_JSON_SUB_MISMATCH","auth.json subject\uAC00 access token \uC2E0\uC6D0\uACFC \uC77C\uCE58\uD558\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4");return r}function ve(e){if(!e||typeof e!="object")return  false;let t=e;return t.version===1&&typeof t.sub=="string"&&typeof t.email=="string"&&typeof t.access_token=="string"&&typeof t.refresh_token=="string"&&typeof t.expires_at=="number"&&typeof t.issuer=="string"&&typeof t.updated_at=="string"}function Ce(){let e=y.join(ne(),"auth.json");if(!d.existsSync(e))throw new Error(`\uB85C\uADF8\uC778\uC774 \uD544\uC694\uD569\uB2C8\uB2E4 \u2014 ${e} \uC744 \uCC3E\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (\uBA3C\uC800 \uB85C\uADF8\uC778\uD558\uC138\uC694)`);let t;try{t=d.readFileSync(e,"utf8");}catch(n){throw new Error(`auth.json \uC744 \uC77D\uC744 \uC218 \uC5C6\uC2B5\uB2C8\uB2E4 (${e}): ${n instanceof Error?n.message:String(n)}`)}let r;try{r=JSON.parse(t);}catch(n){throw new Error(`auth.json \uD30C\uC2F1\uC5D0 \uC2E4\uD328\uD588\uC2B5\uB2C8\uB2E4 (${e}): ${n instanceof Error?n.message:String(n)}`)}if(!ve(r))throw new Error(`auth.json \uD615\uC2DD\uC774 \uC62C\uBC14\uB974\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4 (${e}) \u2014 \uB2E4\uC2DC \uB85C\uADF8\uC778\uD558\uC138\uC694`);let s=N();return j(r,s),r}async function Pe(e,t={}){let r=y__namespace.resolve(e),{included:s,excluded:n}=J(r),i=q(r,s,{version:t.version}),a=L(r,s);return {manifest:i,included:s,excluded:n,secretFindings:a}}async function lt(e,t={}){let r=await Pe(e,t);if(r.secretFindings.length>0){let i=r.secretFindings.map(a=>`${a.path}:${a.line} (${a.rule})`).join(", ");throw new Error(`publish: aborted \u2014 secret findings must be resolved before packing: ${i}`)}let s=y__namespace.resolve(e),n=await Q(s,r.manifest);return {manifest:r.manifest,tgzPath:n}}exports.AccountAuthBoundaryError=g;exports.EXCLUDE_RULES=z;exports.MARKETPLACE_API_PREFIX=A;exports.assertAuthJsonUserRealm=j;exports.assertUserRealmAccessToken=oe;exports.decodeAccessTokenIdentity=ie;exports.packTemplate=lt;exports.planPublish=Pe;exports.readAuthJson=Ce;exports.resolveUserAccountConfig=N;exports.uploadToMarketplace=Se;

package/dist/publish/manifest.d.ts

@@ -0,0 +1,17 @@
+export interface ManifestFile {
+    path: string;
+    sha256: string;
+}
+export interface PublishManifest {
+    name: string;
+    version: string;
+    type: 'template';
+    description: string;
+    files: ManifestFile[];
+    requiredEnv: string[];
+    crewxMinVersion?: string;
+}
+export interface BuildManifestOptions {
+    version?: string;
+}
+export declare function buildManifest(rootDir: string, includedFiles: string[], opts?: BuildManifestOptions): PublishManifest;

package/dist/publish/marketplace-api.constants.d.ts

@@ -0,0 +1 @@
+export declare const MARKETPLACE_API_PREFIX = "/api/v1";

package/dist/publish/pack.d.ts

@@ -0,0 +1,2 @@
+import type { PublishManifest } from './manifest';
+export declare function createArchive(rootDir: string, manifest: PublishManifest): Promise<string>;

package/dist/publish/scan.d.ts

@@ -0,0 +1,9 @@
+export interface ExcludedEntry {
+    path: string;
+    rule: string;
+}
+export interface ScanResult {
+    included: string[];
+    excluded: ExcludedEntry[];
+}
+export declare function scanWorkspace(rootDir: string): ScanResult;

package/dist/publish/secrets.d.ts

@@ -0,0 +1,6 @@
+export interface SecretFinding {
+    path: string;
+    line: number;
+    rule: string;
+}
+export declare function scanForSecrets(rootDir: string, includedFiles: string[]): SecretFinding[];

package/dist/publish/upload.d.ts

@@ -0,0 +1,18 @@
+import type { PublishManifest } from './manifest';
+export interface PublishUploadOptions {
+    tgzPath: string;
+    manifest: PublishManifest;
+    baseUrl: string;
+    accessToken: string;
+    accessPolicy?: 'private';
+}
+export interface PublishUploadResult {
+    slug: string;
+    version: string;
+    artifactChecksum: string;
+    artifactSizeBytes: number;
+    submitOutcome: 'created' | 'existing';
+    versionUpdate: 'not-needed' | 'applied';
+    serverVersionBefore: string | null;
+}
+export declare function uploadToMarketplace(opts: PublishUploadOptions): Promise<PublishUploadResult>;

package/dist/testing/index.js

@@ -1 +1 @@
-'use strict';function m(){let e=[];return {events:e,async log(t,r){e.push({event:t,payload:r});}}}function f(){let e={debug:[],info:[],warn:[],error:[]};return {entries:e,debug(t,r){e.debug.push({msg:t,meta:r});},info(t,r){e.info.push({msg:t,meta:r});},warn(t,r){e.warn.push({msg:t,meta:r});},error(t,r){e.error.push({msg:t,meta:r});}}}function w(){let e=200,t,r,n={},o={status(i){return e=i,o},set(i,d){return n[i]=d,o},send(i){return r=i,o},json(i){return t=i,o},end(){return o},getStatusCode:()=>e,getJsonBody:()=>t,getSentBody:()=>r,getHeaders:()=>({...n})};return o}function h(){let e=[];return {routes:e,registerRoute(r,n,o){e.push({path:r,handler:n,opts:o});},async simulate(r,n,o=Buffer.alloc(0),i={},d={},g={}){let c=e.find(l=>l.path===n);if(!c)return {status:404,body:{error:"Not found"},headers:{}};let p={method:r,url:n,headers:i,body:o,params:d,query:g},u=w();return await c.handler(p,u),{status:u.getStatusCode(),body:u.getJsonBody()??u.getSentBody(),headers:u.getHeaders()}}}}function M(e){let t=new Map,r=n=>n.startsWith(`${e}::`)?n:`${e}::${n}`;return {async get(n){let o=t.get(r(n));return o?o.value:void 0},async set(n,o){t.set(r(n),{value:o});},async delete(n){return t.delete(r(n))},async list(n){let o=n?r(n):`${e}::`,i=[];for(let d of t.keys())d.startsWith(o)&&i.push(d.slice(e.length+2));return i}}}function y(e){return M(e)}function x(){let e=new Map;return {blobs:e,async put(t,r,n){return e.set(t,{data:r,contentType:n}),t},async get(t){let r=e.get(t);return r?r.data:void 0},async delete(t){return e.delete(t)}}}function A(e){let t=e.instanceId??"mock-instance",r=m(),n=f(),o=h(),i=y(t),d=x(),g=[],c=[],p=[],u={run:async()=>({output:""}),...e.agentRunner},l=new AbortController,P=async s=>(g.push(s),{accepted:true}),C=async s=>(c.push(s),{accepted:true}),v=async(s,O)=>{p.push({messageId:s,patch:O});},E=async s=>({userId:s,displayName:s}),k=async()=>{},b=async()=>({messageId:"mock-proactive",sentAt:Date.now()});return {instanceId:t,installationId:e.installationId,config:e.config,capabilities:new Set(e.capabilities??[]),log:n,agentRunner:u,db:i,storage:d,audit:r,abortSignal:e.abortSignal??l.signal,httpRouter:o,router:o,inbound:P,emitEvent:C,updateMessage:v,resolveUser:E,respondSync:k,proactive:b,inboundCalls:g,emittedEvents:c,sentMessages:p}}function L(){}var R={claude:{models:[{id:"claude-fable-5",name:"Claude Fable 5"},{id:"claude-opus-5",name:"Claude Opus 5"},{id:"claude-sonnet-5",name:"Claude Sonnet 5"},{id:"claude-opus-4-8[1m]",name:"Claude Opus 4.8 (Extended)"},{id:"claude-opus-4-8",name:"Claude Opus 4.8"},{id:"claude-opus-4-7[1m]",name:"Claude Opus 4.7 (Extended)"},{id:"claude-opus-4-7",name:"Claude Opus 4.7"},{id:"claude-opus-4-6[1m]",name:"Claude Opus 4.6 (Extended)"},{id:"claude-opus-4-6",name:"Claude Opus 4.6"},{id:"claude-sonnet-4-6[1m]",name:"Claude Sonnet 4.6 (Extended)"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"claude-haiku-4-5",name:"Claude Haiku 4.5"}],modes:[{id:"default",name:"Default"},{id:"acceptEdits",name:"Accept Edits"},{id:"plan",name:"Plan"},{id:"auto",name:"Auto"},{id:"dontAsk",name:"Don't Ask"},{id:"bypassPermissions",name:"Bypass Permissions"}],effort:["low","medium","high"],modelOverrides:{"claude-fable-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-sonnet-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-8[1m]":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-8":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-7[1m]":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-7":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-6[1m]":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-opus-4-6":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-sonnet-4-6[1m]":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-sonnet-4-6":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-haiku-4-5":{effort:[]}}},codex:{models:[{id:"gpt-5.6-sol",name:"GPT-5.6 Sol"},{id:"gpt-5.6-terra",name:"GPT-5.6 Terra"},{id:"gpt-5.6-luna",name:"GPT-5.6 Luna"},{id:"gpt-5.5",name:"GPT-5.5"},{id:"gpt-5.4",name:"GPT-5.4"},{id:"gpt-5.4-mini",name:"GPT-5.4 Mini"},{id:"gpt-5.3-codex",name:"GPT-5.3 Codex"},{id:"gpt-5.3-codex-spark",name:"GPT-5.3 Codex Spark"}],modes:[{id:"agent",name:"Agent"},{id:"read-only",name:"Read Only"},{id:"plan",name:"Plan"},{id:"agent-full-access",name:"Agent Full Access"},{id:"yolo",name:"YOLO"}],effort:["minimal","low","medium","high"],modelOverrides:{"gpt-5.6-sol":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"xhigh"},"gpt-5.6-terra":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"high"},"gpt-5.6-luna":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"high"},"gpt-5.5":{effort:["minimal","low","medium","high","xhigh"],defaultEffort:"high"}}},copilot:{models:[{id:"auto",name:"Auto"},{id:"claude-sonnet-5",name:"Claude Sonnet 5"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"gpt-5.5",name:"GPT-5.5"},{id:"gpt-5.4",name:"GPT-5.4"},{id:"gemini-3.1-pro",name:"Gemini 3.1 Pro"}],modes:[{id:"interactive",name:"Interactive"},{id:"plan",name:"Plan"},{id:"autopilot",name:"Autopilot"}],effort:["none","low","medium","high","xhigh","max"],modelOverrides:{}},antigravity:{models:[{id:"Gemini 3.5 Flash (Medium)",name:"Gemini 3.5 Flash (Medium)"},{id:"Gemini 3.5 Flash (High)",name:"Gemini 3.5 Flash (High)"},{id:"Gemini 3.5 Flash (Low)",name:"Gemini 3.5 Flash (Low)"},{id:"Gemini 3.1 Pro (Low)",name:"Gemini 3.1 Pro (Low)"},{id:"Gemini 3.1 Pro (High)",name:"Gemini 3.1 Pro (High)"},{id:"Claude Sonnet 4.6 (Thinking)",name:"Claude Sonnet 4.6 (Thinking)"},{id:"Claude Opus 4.6 (Thinking)",name:"Claude Opus 4.6 (Thinking)"},{id:"GPT-OSS 120B (Medium)",name:"GPT-OSS 120B (Medium)"}],modes:[],effort:[],modelOverrides:{}}};Object.fromEntries(Object.entries(R).map(([e,t])=>[e,t.models]));function G(){}exports.createMockAudit=m;exports.createMockContext=A;exports.createMockLogger=f;exports.createMockRouter=h;exports.createMockStorage=x;exports.createMockStore=y;exports.resetModelsOverride=G;exports.resetPricingOverride=L;
+'use strict';function f(){let e=[];return {events:e,async log(t,r){e.push({event:t,payload:r});}}}function m(){let e={debug:[],info:[],warn:[],error:[]};return {entries:e,debug(t,r){e.debug.push({msg:t,meta:r});},info(t,r){e.info.push({msg:t,meta:r});},warn(t,r){e.warn.push({msg:t,meta:r});},error(t,r){e.error.push({msg:t,meta:r});}}}function w(){let e=200,t,r,o={},n={status(i){return e=i,n},set(i,s){return o[i]=s,n},send(i){return r=i,n},json(i){return t=i,n},end(){return n},getStatusCode:()=>e,getJsonBody:()=>t,getSentBody:()=>r,getHeaders:()=>({...o})};return n}function h(){let e=[];return {routes:e,registerRoute(r,o,n){e.push({path:r,handler:o,opts:n});},async simulate(r,o,n=Buffer.alloc(0),i={},s={},g={}){let c=e.find(p=>p.path===o);if(!c)return {status:404,body:{error:"Not found"},headers:{}};let l={method:r,url:o,headers:i,body:n,params:s,query:g},u=w();return await c.handler(l,u),{status:u.getStatusCode(),body:u.getJsonBody()??u.getSentBody(),headers:u.getHeaders()}}}}function P(e){let t=new Map,r=o=>o.startsWith(`${e}::`)?o:`${e}::${o}`;return {async get(o){let n=t.get(r(o));return n?n.value:void 0},async set(o,n){t.set(r(o),{value:n});},async delete(o){return t.delete(r(o))},async list(o){let n=o?r(o):`${e}::`,i=[];for(let s of t.keys())s.startsWith(n)&&i.push(s.slice(e.length+2));return i}}}function y(e){return P(e)}function x(){let e=new Map;return {blobs:e,async put(t,r,o){return e.set(t,{data:r,contentType:o}),t},async get(t){let r=e.get(t);return r?r.data:void 0},async delete(t){return e.delete(t)}}}function A(e){let t=e.instanceId??"mock-instance",r=f(),o=m(),n=h(),i=y(t),s=x(),g=[],c=[],l=[],u={run:async()=>({output:""}),...e.agentRunner},p=new AbortController,v=async a=>(g.push(a),{accepted:true}),R=async a=>(c.push(a),{accepted:true}),E=async(a,b)=>{l.push({messageId:a,patch:b});},C=async a=>({userId:a,displayName:a}),k=async()=>{},O=async()=>({messageId:"mock-proactive",sentAt:Date.now()});return {instanceId:t,installationId:e.installationId,config:e.config,capabilities:new Set(e.capabilities??[]),log:o,agentRunner:u,db:i,storage:s,audit:r,abortSignal:e.abortSignal??p.signal,httpRouter:n,router:n,inbound:v,emitEvent:R,updateMessage:E,resolveUser:C,respondSync:k,proactive:O,inboundCalls:g,emittedEvents:c,sentMessages:l}}function L(){}var M={claude:{models:[{id:"claude-fable-5",name:"Claude Fable 5"},{id:"claude-opus-5",name:"Claude Opus 5"},{id:"claude-sonnet-5",name:"Claude Sonnet 5"},{id:"claude-opus-4-8[1m]",name:"Claude Opus 4.8 (Extended)"},{id:"claude-opus-4-8",name:"Claude Opus 4.8"},{id:"claude-opus-4-7[1m]",name:"Claude Opus 4.7 (Extended)"},{id:"claude-opus-4-7",name:"Claude Opus 4.7"},{id:"claude-opus-4-6[1m]",name:"Claude Opus 4.6 (Extended)"},{id:"claude-opus-4-6",name:"Claude Opus 4.6"},{id:"claude-sonnet-4-6[1m]",name:"Claude Sonnet 4.6 (Extended)"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"claude-haiku-4-5",name:"Claude Haiku 4.5"}],modes:[{id:"default",name:"Default"},{id:"acceptEdits",name:"Accept Edits"},{id:"plan",name:"Plan"},{id:"auto",name:"Auto"},{id:"dontAsk",name:"Don't Ask"},{id:"bypassPermissions",name:"Bypass Permissions"}],effort:["low","medium","high"],modelOverrides:{"claude-fable-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-sonnet-5":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-8[1m]":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-8":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-7[1m]":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-7":{effort:["low","medium","high","xhigh","max"],defaultEffort:"high"},"claude-opus-4-6[1m]":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-opus-4-6":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-sonnet-4-6[1m]":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-sonnet-4-6":{effort:["low","medium","high","max"],defaultEffort:"high"},"claude-haiku-4-5":{effort:[]}}},codex:{models:[{id:"gpt-5.6-sol",name:"GPT-5.6 Sol"},{id:"gpt-5.6-terra",name:"GPT-5.6 Terra"},{id:"gpt-5.6-luna",name:"GPT-5.6 Luna"},{id:"gpt-5.5",name:"GPT-5.5"},{id:"gpt-5.4",name:"GPT-5.4"},{id:"gpt-5.4-mini",name:"GPT-5.4 Mini"},{id:"gpt-5.3-codex",name:"GPT-5.3 Codex"},{id:"gpt-5.3-codex-spark",name:"GPT-5.3 Codex Spark"}],modes:[{id:"agent",name:"Agent"},{id:"read-only",name:"Read Only"},{id:"plan",name:"Plan"},{id:"agent-full-access",name:"Agent Full Access"},{id:"yolo",name:"YOLO"}],effort:["minimal","low","medium","high"],modelOverrides:{"gpt-5.6-sol":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"xhigh"},"gpt-5.6-terra":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"high"},"gpt-5.6-luna":{effort:["none","low","medium","high","xhigh","max"],defaultEffort:"high"},"gpt-5.5":{effort:["minimal","low","medium","high","xhigh"],defaultEffort:"high"}}},copilot:{models:[{id:"auto",name:"Auto"},{id:"claude-sonnet-5",name:"Claude Sonnet 5"},{id:"claude-sonnet-4-6",name:"Claude Sonnet 4.6"},{id:"gpt-5.5",name:"GPT-5.5"},{id:"gpt-5.4",name:"GPT-5.4"},{id:"gemini-3.1-pro",name:"Gemini 3.1 Pro"}],modes:[{id:"interactive",name:"Interactive"},{id:"plan",name:"Plan"},{id:"autopilot",name:"Autopilot"}],effort:["none","low","medium","high","xhigh","max"],modelOverrides:{}},antigravity:{models:[{id:"Gemini 3.5 Flash (Medium)",name:"Gemini 3.5 Flash (Medium)"},{id:"Gemini 3.5 Flash (High)",name:"Gemini 3.5 Flash (High)"},{id:"Gemini 3.5 Flash (Low)",name:"Gemini 3.5 Flash (Low)"},{id:"Gemini 3.1 Pro (Low)",name:"Gemini 3.1 Pro (Low)"},{id:"Gemini 3.1 Pro (High)",name:"Gemini 3.1 Pro (High)"},{id:"Claude Sonnet 4.6 (Thinking)",name:"Claude Sonnet 4.6 (Thinking)"},{id:"Claude Opus 4.6 (Thinking)",name:"Claude Opus 4.6 (Thinking)"},{id:"GPT-OSS 120B (Medium)",name:"GPT-OSS 120B (Medium)"}],modes:[],effort:[],modelOverrides:{}}};Object.fromEntries(Object.entries(M).map(([e,t])=>[e,t.models]));function D(){}exports.createMockAudit=f;exports.createMockContext=A;exports.createMockLogger=m;exports.createMockRouter=h;exports.createMockStorage=x;exports.createMockStore=y;exports.resetModelsOverride=D;exports.resetPricingOverride=L;

package/dist/utils/crewx-home.d.ts

@@ -0,0 +1 @@
+export declare function getCrewxHome(): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewx/sdk",
-  "version": "0.9.0-rc.46",
+  "version": "0.9.0-rc.49",
   "license": "UNLICENSED",
   "engines": {
     "node": ">=20.19.0"
@@ -55,6 +55,11 @@
       "import": "./dist/desktop/index.js",
       "require": "./dist/desktop/index.js"
     },
+    "./publish": {
+      "types": "./dist/publish/index.d.ts",
+      "import": "./dist/publish/index.js",
+      "require": "./dist/publish/index.js"
+    },
     "./package.json": "./package.json"
   },
   "browser": {
@@ -67,7 +72,9 @@
     "./dist/repository/index.js": false,
     "./dist/esm/repository/index.js": false,
     "./dist/desktop/index.js": false,
-    "./dist/esm/desktop/index.js": false
+    "./dist/esm/desktop/index.js": false,
+    "./dist/publish/index.js": false,
+    "./dist/esm/publish/index.js": false
   },
   "files": [
     "dist",
@@ -82,6 +89,7 @@
     "drizzle-orm": "0.45.2",
     "handlebars": "4.7.9",
     "js-yaml": "4.1.0",
+    "tar": "7.5.15",
     "zod": "3.25.76"
   },
   "peerDependencies": {