@fprad0/skill-master-mcp 0.0.2

package/dist/skill-network.js

@@ -0,0 +1,226 @@
+import { createHash } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+const CONTRIBUTION_SCHEMA_VERSION = 'skill-master-contribution-v1';
+const POLICY_VERSION = 'safe-skill-network-v1';
+const MAX_SKILL_SCAN_BYTES = 512_000;
+const normalizeSkillName = (value) => value
+    .normalize('NFD')
+    .replace(/[\u0300-\u036f]/g, '')
+    .toLowerCase()
+    .trim();
+const hashValue = (value) => createHash('sha256').update(value).digest('hex');
+const redactSensitive = (value) => value
+    .replace(/(sk-[a-zA-Z0-9_-]{16,})/g, '[REDACTED_OPENAI_KEY]')
+    .replace(/(gh[pousr]_[a-zA-Z0-9_]{20,})/g, '[REDACTED_GITHUB_TOKEN]')
+    .replace(/([A-Za-z0-9+/]{32,}={0,2})/g, '[REDACTED_LONG_TOKEN]');
+const safeLocationHint = (location) => {
+    if (/^https?:\/\//i.test(location)) {
+        try {
+            const url = new URL(location);
+            return `${url.hostname}${url.pathname.split('/').slice(-3).join('/')}`;
+        }
+        catch {
+            return 'remote/SKILL.md';
+        }
+    }
+    const parent = path.basename(path.dirname(location));
+    return `${parent}/SKILL.md`;
+};
+const isContributionScope = (sourceKind) => sourceKind === 'local' || sourceKind === 'workspace' || sourceKind === 'plugin';
+const readSkillMarkdownForRiskScan = async (skill) => {
+    if (/^https?:\/\//i.test(skill.location)) {
+        return '';
+    }
+    try {
+        const stats = await fs.stat(skill.location);
+        if (!stats.isFile() || stats.size > MAX_SKILL_SCAN_BYTES) {
+            return '';
+        }
+        return await fs.readFile(skill.location, 'utf8');
+    }
+    catch {
+        return '';
+    }
+};
+const detectRiskFlags = (markdown) => {
+    const flags = new Set();
+    const content = markdown.toLowerCase();
+    if (/curl\s+[^|\n]+\|\s*(sh|bash)/i.test(markdown))
+        flags.add('shell-pipe-download');
+    if (/iwr\s+[^|\n]+\|\s*iex/i.test(markdown) || /invoke-webrequest[\s\S]{0,120}iex/i.test(markdown))
+        flags.add('powershell-download-exec');
+    if (/powershell(\.exe)?\s+-enc(odedcommand)?/i.test(markdown))
+        flags.add('encoded-powershell');
+    if (/\brm\s+-rf\s+(\/|\$HOME|~)/i.test(markdown))
+        flags.add('destructive-shell-command');
+    if (/\b(eval|exec)\s*\(/i.test(markdown))
+        flags.add('dynamic-code-execution');
+    if (/sk-[a-zA-Z0-9_-]{16,}/.test(markdown) || /gh[pousr]_[a-zA-Z0-9_]{20,}/.test(markdown))
+        flags.add('possible-secret');
+    if (content.includes('disable antivirus') || content.includes('bypass antivirus'))
+        flags.add('evasion-language');
+    return [...flags].sort();
+};
+export const emptyApprovedSkillIndex = () => ({
+    generatedAt: new Date(0).toISOString(),
+    policyVersion: POLICY_VERSION,
+    skills: [],
+});
+export const readApprovedSkillIndex = async (indexPath) => {
+    try {
+        const raw = await fs.readFile(indexPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        return {
+            generatedAt: parsed.generatedAt,
+            policyVersion: parsed.policyVersion,
+            skills: Array.isArray(parsed.skills) ? parsed.skills : [],
+        };
+    }
+    catch {
+        return emptyApprovedSkillIndex();
+    }
+};
+export const prepareSkillContribution = async ({ snapshotSkills, approvedIndex, outputDir, machineLabel, includeBodyPreview, includeWorkspace, includePlugin, maxCandidates, }) => {
+    const knownNames = new Set(approvedIndex.skills.map((skill) => normalizeSkillName(skill.name)));
+    const knownHashes = new Set(approvedIndex.skills.map((skill) => skill.contentHash));
+    const candidates = [];
+    const skipped = {
+        alreadyKnownByName: 0,
+        alreadyKnownByHash: 0,
+        unsupportedSource: 0,
+        missingContentHash: 0,
+    };
+    for (const skill of snapshotSkills) {
+        if (!isContributionScope(skill.sourceKind)) {
+            skipped.unsupportedSource += 1;
+            continue;
+        }
+        if (skill.sourceKind === 'workspace' && !includeWorkspace) {
+            skipped.unsupportedSource += 1;
+            continue;
+        }
+        if (skill.sourceKind === 'plugin' && !includePlugin) {
+            skipped.unsupportedSource += 1;
+            continue;
+        }
+        if (!skill.contentHash) {
+            skipped.missingContentHash += 1;
+            continue;
+        }
+        if (knownHashes.has(skill.contentHash)) {
+            skipped.alreadyKnownByHash += 1;
+            continue;
+        }
+        if (knownNames.has(normalizeSkillName(skill.name))) {
+            skipped.alreadyKnownByName += 1;
+            continue;
+        }
+        const markdown = await readSkillMarkdownForRiskScan(skill);
+        const riskFlags = detectRiskFlags(markdown);
+        const bodyPreview = includeBodyPreview
+            ? redactSensitive(markdown.replace(/\s+/g, ' ').trim()).slice(0, 800)
+            : undefined;
+        candidates.push({
+            name: skill.name,
+            description: skill.description,
+            contentHash: skill.contentHash,
+            sourceKind: skill.sourceKind,
+            sourceLabel: skill.sourceLabel,
+            locationHint: safeLocationHint(skill.location),
+            locationHash: hashValue(skill.location),
+            headings: skill.headings.slice(0, 20),
+            keywords: skill.keywords.slice(0, 30),
+            modifiedAt: skill.modifiedAt,
+            riskFlags,
+            ...(bodyPreview ? { bodyPreview } : {}),
+        });
+        if (candidates.length >= maxCandidates) {
+            break;
+        }
+    }
+    const draft = {
+        schemaVersion: CONTRIBUTION_SCHEMA_VERSION,
+        generatedAt: new Date().toISOString(),
+        policyVersion: POLICY_VERSION,
+        ...(machineLabel ? { machineLabel } : {}),
+        privacy: {
+            fullPathsIncluded: false,
+            rawSkillBodiesIncluded: false,
+            bodyPreviewIncluded: includeBodyPreview,
+        },
+        candidates,
+        skipped,
+    };
+    await fs.mkdir(outputDir, { recursive: true });
+    const timestamp = draft.generatedAt.replace(/[:.]/g, '-');
+    const filePath = path.join(outputDir, `skill-contribution-${timestamp}.json`);
+    await fs.writeFile(filePath, JSON.stringify(draft, null, 2), 'utf8');
+    return { draft, filePath };
+};
+export const reviewSkillContribution = async ({ contributionPath, approvedIndex, }) => {
+    let draft;
+    try {
+        draft = JSON.parse(await fs.readFile(contributionPath, 'utf8'));
+    }
+    catch {
+        return {
+            schemaVersion: 'unknown',
+            totalCandidates: 0,
+            highRiskCandidates: 0,
+            alreadyApprovedByHash: 0,
+            alreadyApprovedByName: 0,
+            recommendation: 'invalid',
+            findings: ['Contribution file could not be parsed as JSON.'],
+        };
+    }
+    if (draft.schemaVersion !== CONTRIBUTION_SCHEMA_VERSION || !Array.isArray(draft.candidates)) {
+        return {
+            schemaVersion: draft.schemaVersion ?? 'unknown',
+            generatedAt: draft.generatedAt,
+            totalCandidates: 0,
+            highRiskCandidates: 0,
+            alreadyApprovedByHash: 0,
+            alreadyApprovedByName: 0,
+            recommendation: 'invalid',
+            findings: ['Contribution schema is not supported.'],
+        };
+    }
+    const knownNames = new Set(approvedIndex.skills.map((skill) => normalizeSkillName(skill.name)));
+    const knownHashes = new Set(approvedIndex.skills.map((skill) => skill.contentHash));
+    const highRiskTerms = new Set([
+        'possible-secret',
+        'shell-pipe-download',
+        'powershell-download-exec',
+        'encoded-powershell',
+        'destructive-shell-command',
+        'evasion-language',
+    ]);
+    const highRiskCandidates = draft.candidates.filter((candidate) => candidate.riskFlags.some((flag) => highRiskTerms.has(flag)));
+    const alreadyApprovedByHash = draft.candidates.filter((candidate) => knownHashes.has(candidate.contentHash)).length;
+    const alreadyApprovedByName = draft.candidates.filter((candidate) => knownNames.has(normalizeSkillName(candidate.name))).length;
+    const findings = [];
+    if (draft.privacy.fullPathsIncluded)
+        findings.push('Full paths are included; reject or sanitize before sharing.');
+    if (draft.privacy.rawSkillBodiesIncluded)
+        findings.push('Raw skill bodies are included; reject unless manually reviewed.');
+    if (highRiskCandidates.length > 0)
+        findings.push(`${highRiskCandidates.length} candidate(s) contain high-risk flags.`);
+    if (alreadyApprovedByHash > 0)
+        findings.push(`${alreadyApprovedByHash} candidate(s) already exist by content hash.`);
+    if (alreadyApprovedByName > 0)
+        findings.push(`${alreadyApprovedByName} candidate(s) already exist by normalized name.`);
+    if (findings.length === 0)
+        findings.push('No blocking issue found. Human review is still required before approval.');
+    return {
+        schemaVersion: draft.schemaVersion,
+        generatedAt: draft.generatedAt,
+        totalCandidates: draft.candidates.length,
+        highRiskCandidates: highRiskCandidates.length,
+        alreadyApprovedByHash,
+        alreadyApprovedByName,
+        recommendation: highRiskCandidates.length > 0 ? 'needs-human-security-review' : 'safe-to-review',
+        findings,
+    };
+};
+//# sourceMappingURL=skill-network.js.map

package/dist/skill-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-network.js","sourceRoot":"","sources":["../src/skill-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,2BAA2B,GAAG,8BAA8B,CAAC;AACnE,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAiDrC,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK;KACxD,SAAS,CAAC,KAAK,CAAC;KAChB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;KAC/B,WAAW,EAAE;KACb,IAAI,EAAE,CAAC;AAEV,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE9F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK;KACrD,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;KAC5D,OAAO,CAAC,gCAAgC,EAAE,yBAAyB,CAAC;KACpE,OAAO,CAAC,6BAA6B,EAAE,uBAAuB,CAAC,CAAC;AAEnE,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAU,EAAE;IACpD,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,MAAM,WAAW,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,UAA2B,EAAmC,EAAE,CAC3F,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,QAAQ,CAAC;AAElF,MAAM,4BAA4B,GAAG,KAAK,EAAE,KAAkB,EAAmB,EAAE;IACjF,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,QAAgB,EAAY,EAAE;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEvC,IAAI,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrF,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1I,IAAI,0CAA0C,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/F,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzF,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC9E,IAAI,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACzH,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAEjH,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAuB,EAAE,CAAC,CAAC;IAChE,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;IACtC,aAAa,EAAE,cAAc;IAC7B,MAAM,EAAE,EAAE;CACX,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,SAAiB,EAA+B,EAAE;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SAC1D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,uBAAuB,EAAE,CAAC;IACnC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAAE,EAC7C,cAAc,EACd,aAAa,EACb,SAAS,EACT,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,aAAa,GAUd,EAAgE,EAAE;IACjE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,MAAM,UAAU,GAAiC,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG;QACd,kBAAkB,EAAE,CAAC;QACrB,kBAAkB,EAAE,CAAC;QACrB,iBAAiB,EAAE,CAAC;QACpB,kBAAkB,EAAE,CAAC;KACtB,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1D,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,kBAAkB;YACpC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACrE,CAAC,CAAC,SAAS,CAAC;QAEd,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC9C,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS;YACT,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;YACvC,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAA2B;QACpC,aAAa,EAAE,2BAA2B;QAC1C,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,cAAc;QAC7B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE;YACP,iBAAiB,EAAE,KAAK;YACxB,sBAAsB,EAAE,KAAK;YAC7B,mBAAmB,EAAE,kBAAkB;SACxC;QACD,UAAU;QACV,OAAO;KACR,CAAC;IAEF,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,SAAS,OAAO,CAAC,CAAC;IAC9E,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAErE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAAE,EAC5C,gBAAgB,EAChB,aAAa,GAId,EAA+B,EAAE;IAChC,IAAI,KAA6B,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,eAAe,EAAE,CAAC;YAClB,kBAAkB,EAAE,CAAC;YACrB,qBAAqB,EAAE,CAAC;YACxB,qBAAqB,EAAE,CAAC;YACxB,cAAc,EAAE,SAAS;YACzB,QAAQ,EAAE,CAAC,gDAAgD,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,2BAA2B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5F,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,SAAS;YAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,CAAC;YAClB,kBAAkB,EAAE,CAAC;YACrB,qBAAqB,EAAE,CAAC;YACxB,qBAAqB,EAAE,CAAC;YACxB,cAAc,EAAE,SAAS;YACzB,QAAQ,EAAE,CAAC,uCAAuC,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,iBAAiB;QACjB,qBAAqB;QACrB,0BAA0B;QAC1B,oBAAoB;QACpB,2BAA2B;QAC3B,kBAAkB;KACnB,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAC/D,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,qBAAqB,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IACpH,MAAM,qBAAqB,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChI,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB;QAAE,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAClH,IAAI,KAAK,CAAC,OAAO,CAAC,sBAAsB;QAAE,QAAQ,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC3H,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,MAAM,wCAAwC,CAAC,CAAC;IACvH,IAAI,qBAAqB,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,8CAA8C,CAAC,CAAC;IACrH,IAAI,qBAAqB,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,qBAAqB,iDAAiD,CAAC,CAAC;IACxH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IAErH,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;QACxC,kBAAkB,EAAE,kBAAkB,CAAC,MAAM;QAC7C,qBAAqB;QACrB,qBAAqB;QACrB,cAAc,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,gBAAgB;QAChG,QAAQ;KACT,CAAC;AACJ,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,89 @@
+export type SkillSourceKind = 'workspace' | 'local' | 'plugin' | 'web';
+export type SkillRecord = {
+    id: string;
+    name: string;
+    description: string;
+    contentHash?: string;
+    sourceKind: SkillSourceKind;
+    sourceLabel: string;
+    location: string;
+    headings: string[];
+    keywords: string[];
+    bodyPreview: string;
+    trusted: boolean;
+    modifiedAt?: string;
+};
+export type CatalogSnapshot = {
+    generatedAt: string;
+    skills: SkillRecord[];
+    warnings: string[];
+};
+export type WebSource = {
+    name: string;
+    type: 'github-tree';
+    repository: string;
+    branch: string;
+    enabled: boolean;
+};
+export type SourcesConfig = {
+    localRoots: string[];
+    workspaceRoots: string[];
+    webSources: WebSource[];
+};
+export type Recommendation = {
+    skill: SkillRecord;
+    score: number;
+    reasons: string[];
+    phase: string;
+    required: boolean;
+};
+export type RemoteManifest = {
+    name: string;
+    channel: string;
+    version: string;
+    semver: string;
+    publishedAt: string;
+    git: {
+        repo: string;
+        branch: string;
+        commit: string;
+    };
+    node: {
+        minimum: string;
+    };
+    update: {
+        strategy: string;
+        requiresCleanTree: boolean;
+        installCommand?: string;
+        buildCommand?: string;
+    };
+    changelog: string[];
+};
+export type SyncStatus = {
+    localVersion: string;
+    localSemver: string;
+    localCommit: string;
+    localBranch: string;
+    localClean: boolean;
+    remoteVersion?: string;
+    remoteSemver?: string;
+    remoteCommit?: string;
+    remotePublishedAt?: string;
+    updateAvailable: boolean;
+    recommendedAction: string;
+    manifestSource: string;
+};
+export type ApprovedSkillSummary = {
+    name: string;
+    description: string;
+    contentHash: string;
+    sourceKind: SkillSourceKind | 'network';
+    approvedAt: string;
+    approvedBy?: string;
+};
+export type ApprovedSkillIndex = {
+    generatedAt: string;
+    policyVersion: string;
+    skills: ApprovedSkillSummary[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEvE,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE;QACH,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,iBAAiB,EAAE,OAAO,CAAC;QAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,oBAAoB,EAAE,CAAC;CAChC,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/update.d.ts

@@ -0,0 +1,45 @@
+import type { RemoteManifest, SyncStatus } from './types.js';
+export declare const DEFAULT_RELEASE_BRANCH = "main";
+export declare const DEFAULT_UPDATE_CHANNEL = "stable";
+export declare const manifestPathForChannel: (channel: string) => string;
+export declare const buildRecommendedAction: ({ localClean, updateAvailable, channel, branch, packageMode, }: {
+    localClean: boolean;
+    updateAvailable: boolean;
+    channel: string;
+    branch: string;
+    packageMode: boolean;
+}) => string;
+export declare const buildSuggestedUpdateStep: ({ packageMode, branch, }: {
+    packageMode: boolean;
+    branch: string;
+}) => string;
+export declare const compareSemver: (left: string, right: string) => number;
+export declare const parseRemoteManifest: (raw: string) => RemoteManifest | null;
+export declare const readVersionFromMarkdown: (versionFile: string) => Promise<{
+    version: string;
+    semver: string;
+}>;
+export declare const loadRemoteManifest: ({ repoRoot, manifestUrl, branch, channel, }: {
+    repoRoot: string;
+    manifestUrl: string;
+    branch: string;
+    channel: string;
+}) => Promise<{
+    manifest: RemoteManifest | null;
+    source: string;
+}>;
+export declare const buildSyncStatus: (params: {
+    repoRoot: string;
+    manifestUrl: string;
+    versionFile: string;
+    branch?: string;
+    channel?: string;
+}) => Promise<SyncStatus>;
+export declare const buildUpdatePlan: (params: {
+    repoRoot: string;
+    manifestUrl: string;
+    versionFile: string;
+    branch?: string;
+    channel?: string;
+}) => Promise<string[]>;
+//# sourceMappingURL=update.d.ts.map

package/dist/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAgC7D,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,sBAAsB,WAAW,CAAC;AAE/C,eAAO,MAAM,sBAAsB,GAAI,SAAS,MAAM,KAAG,MACnB,CAAC;AAEvC,eAAO,MAAM,sBAAsB,GAAI,gEAMpC;IACD,UAAU,EAAE,OAAO,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;CACtB,KAAG,MAcH,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,0BAGtC;IACD,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,KAAG,MAIH,CAAC;AAkBF,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,OAAO,MAAM,KAAG,MAmB3D,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,KAAK,MAAM,KAAG,cAAc,GAAG,IAMlE,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,aAAa,MAAM,KAClB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAQ7C,CAAC;AA4GF,eAAO,MAAM,kBAAkB,GAAU,6CAKtC;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6B9D,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,QAAQ;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,KAAG,OAAO,CAAC,UAAU,CA4DrB,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,QAAQ;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,KAAG,OAAO,CAAC,MAAM,EAAE,CAmCnB,CAAC"}

package/dist/update.js

@@ -0,0 +1,288 @@
+import { Buffer } from 'node:buffer';
+import { execFile } from 'node:child_process';
+import { promises as fs } from 'node:fs';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+const execFileAsync = promisify(execFile);
+const manifestSchema = z.object({
+    name: z.string(),
+    channel: z.string(),
+    version: z.string(),
+    semver: z.string(),
+    publishedAt: z.string(),
+    git: z.object({
+        repo: z.string(),
+        branch: z.string(),
+        commit: z.string(),
+    }),
+    node: z.object({
+        minimum: z.string(),
+    }),
+    update: z.object({
+        strategy: z.string(),
+        requiresCleanTree: z.boolean(),
+        installCommand: z.string(),
+        buildCommand: z.string(),
+    }),
+    changelog: z.array(z.string()),
+});
+const githubContentSchema = z.object({
+    content: z.string(),
+    encoding: z.string(),
+});
+export const DEFAULT_RELEASE_BRANCH = 'main';
+export const DEFAULT_UPDATE_CHANNEL = 'stable';
+export const manifestPathForChannel = (channel) => `manifests/channels/${channel}.json`;
+export const buildRecommendedAction = ({ localClean, updateAvailable, channel, branch, packageMode, }) => {
+    if (!localClean) {
+        return 'Ha alteracoes locais; revise antes de atualizar.';
+    }
+    if (!updateAvailable) {
+        return `Versao local alinhada com o canal ${channel}.`;
+    }
+    if (packageMode) {
+        return `Atualizacao disponivel no canal ${channel}. Atualize o pacote no registry privado ou reexecute o cliente MCP com a versao mais recente.`;
+    }
+    return `Atualizacao disponivel no canal ${channel}. Use git pull --ff-only origin ${branch}, npm ci e npm run build.`;
+};
+export const buildSuggestedUpdateStep = ({ packageMode, branch, }) => (packageMode
+    ? 'Passos sugeridos: atualizar o pacote no registry privado -> reiniciar o cliente MCP.'
+    : `Passos sugeridos: git pull --ff-only origin ${branch} -> npm ci -> npm run build -> reiniciar o MCP.`);
+const runCommand = async (command, args, cwd) => {
+    try {
+        const { stdout } = await execFileAsync(command, args, cwd ? { cwd, windowsHide: true } : { windowsHide: true });
+        return stdout.trim();
+    }
+    catch {
+        return null;
+    }
+};
+const runGit = async (repoRoot, args) => runCommand('git', args, repoRoot);
+export const compareSemver = (left, right) => {
+    const leftParts = left.split('.').map((value) => Number(value));
+    const rightParts = right.split('.').map((value) => Number(value));
+    const size = Math.max(leftParts.length, rightParts.length);
+    for (let index = 0; index < size; index += 1) {
+        const leftValue = leftParts[index] ?? 0;
+        const rightValue = rightParts[index] ?? 0;
+        if (leftValue > rightValue) {
+            return 1;
+        }
+        if (leftValue < rightValue) {
+            return -1;
+        }
+    }
+    return 0;
+};
+export const parseRemoteManifest = (raw) => {
+    try {
+        return manifestSchema.parse(JSON.parse(raw));
+    }
+    catch {
+        return null;
+    }
+};
+export const readVersionFromMarkdown = async (versionFile) => {
+    const raw = await fs.readFile(versionFile, 'utf8');
+    const values = [...raw.matchAll(/`([^`]+)`/g)].map((match) => match[1]);
+    return {
+        version: values[0] ?? '00.01',
+        semver: values[1] ?? '0.0.1',
+    };
+};
+const loadManifestFromHttp = async (manifestUrl) => {
+    try {
+        const response = await fetch(manifestUrl, { signal: AbortSignal.timeout(12_000) });
+        if (!response.ok) {
+            return null;
+        }
+        return parseRemoteManifest(await response.text());
+    }
+    catch {
+        return null;
+    }
+};
+const parseGitHubManifestLocation = (manifestUrl) => {
+    try {
+        const url = new URL(manifestUrl);
+        if (url.hostname === 'raw.githubusercontent.com') {
+            const parts = url.pathname.split('/').filter(Boolean);
+            if (parts.length < 4) {
+                return null;
+            }
+            const [owner, repo, ref, ...pathParts] = parts;
+            return {
+                ownerRepo: `${owner}/${repo}`,
+                ref,
+                path: pathParts.join('/'),
+            };
+        }
+        if (url.hostname === 'github.com') {
+            const parts = url.pathname.split('/').filter(Boolean);
+            const blobIndex = parts.indexOf('blob');
+            if (blobIndex !== 2 || parts.length < 5) {
+                return null;
+            }
+            const [owner, repo] = parts;
+            const ref = parts[3];
+            const path = parts.slice(4).join('/');
+            return {
+                ownerRepo: `${owner}/${repo}`,
+                ref,
+                path,
+            };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+};
+const loadManifestFromGitHubCli = async (manifestUrl) => {
+    const location = parseGitHubManifestLocation(manifestUrl);
+    if (!location) {
+        return null;
+    }
+    const response = await runCommand('gh', [
+        'api',
+        `repos/${location.ownerRepo}/contents/${location.path}?ref=${location.ref}`,
+    ]);
+    if (!response) {
+        return null;
+    }
+    try {
+        const payload = githubContentSchema.parse(JSON.parse(response));
+        const decoded = Buffer.from(payload.content.replace(/\n/g, ''), payload.encoding).toString('utf8');
+        return parseRemoteManifest(decoded);
+    }
+    catch {
+        return null;
+    }
+};
+const loadManifestFromGitTracking = async ({ repoRoot, branch, channel, }) => {
+    const origin = await runGit(repoRoot, ['remote', 'get-url', 'origin']);
+    if (!origin) {
+        return null;
+    }
+    await runGit(repoRoot, ['fetch', 'origin', '--prune']);
+    const manifestText = await runGit(repoRoot, [
+        'show',
+        `origin/${branch}:${manifestPathForChannel(channel)}`,
+    ]);
+    return manifestText ? parseRemoteManifest(manifestText) : null;
+};
+export const loadRemoteManifest = async ({ repoRoot, manifestUrl, branch, channel, }) => {
+    const fromGit = await loadManifestFromGitTracking({ repoRoot, branch, channel });
+    if (fromGit) {
+        return {
+            manifest: fromGit,
+            source: `git:origin/${branch}:${manifestPathForChannel(channel)}`,
+        };
+    }
+    const fromHttp = await loadManifestFromHttp(manifestUrl);
+    if (fromHttp) {
+        return {
+            manifest: fromHttp,
+            source: manifestUrl,
+        };
+    }
+    const fromGh = await loadManifestFromGitHubCli(manifestUrl);
+    if (fromGh) {
+        return {
+            manifest: fromGh,
+            source: `gh:${manifestUrl}`,
+        };
+    }
+    return {
+        manifest: null,
+        source: manifestUrl,
+    };
+};
+export const buildSyncStatus = async (params) => {
+    const branch = params.branch ?? DEFAULT_RELEASE_BRANCH;
+    const channel = params.channel ?? DEFAULT_UPDATE_CHANNEL;
+    const local = await readVersionFromMarkdown(params.versionFile).catch(() => ({
+        version: '00.01',
+        semver: '0.0.1',
+    }));
+    const remoteResult = await loadRemoteManifest({
+        repoRoot: params.repoRoot,
+        manifestUrl: params.manifestUrl,
+        branch,
+        channel,
+    });
+    const remote = remoteResult.manifest;
+    const localCommit = (await runGit(params.repoRoot, ['rev-parse', '--short', 'HEAD'])) ?? 'unknown';
+    const localBranch = (await runGit(params.repoRoot, ['rev-parse', '--abbrev-ref', 'HEAD'])) ?? 'unknown';
+    const gitStatus = (await runGit(params.repoRoot, ['status', '--short'])) ?? '';
+    const localClean = gitStatus.length === 0;
+    const remoteTrackingCommit = await runGit(params.repoRoot, ['rev-parse', '--short', `origin/${branch}`]);
+    const packageMode = localCommit === 'unknown' || localBranch === 'unknown';
+    if (!remote) {
+        return {
+            localVersion: local.version,
+            localSemver: local.semver,
+            localCommit,
+            localBranch,
+            localClean,
+            updateAvailable: false,
+            recommendedAction: 'Nao foi possivel consultar o manifesto remoto. Verifique origin, canal e autenticacao do GitHub.',
+            manifestSource: remoteResult.source,
+        };
+    }
+    const semverComparison = compareSemver(local.semver, remote.semver);
+    const branchHasNewCommit = Boolean(remoteTrackingCommit && remoteTrackingCommit !== localCommit);
+    const updateAvailable = semverComparison < 0 || (semverComparison <= 0 && branchHasNewCommit);
+    const recommendedAction = buildRecommendedAction({
+        localClean,
+        updateAvailable,
+        channel,
+        branch,
+        packageMode,
+    });
+    return {
+        localVersion: local.version,
+        localSemver: local.semver,
+        localCommit,
+        localBranch,
+        localClean,
+        remoteVersion: remote.version,
+        remoteSemver: remote.semver,
+        remoteCommit: remoteTrackingCommit ?? remote.git.commit,
+        remotePublishedAt: remote.publishedAt,
+        updateAvailable,
+        recommendedAction,
+        manifestSource: remoteResult.source,
+    };
+};
+export const buildUpdatePlan = async (params) => {
+    const branch = params.branch ?? DEFAULT_RELEASE_BRANCH;
+    const channel = params.channel ?? DEFAULT_UPDATE_CHANNEL;
+    const status = await buildSyncStatus({
+        ...params,
+        branch,
+        channel,
+    });
+    const steps = [
+        `Canal remoto: ${channel}`,
+        `Fonte do manifesto: ${status.manifestSource}`,
+        `Versao local: ${status.localVersion} (${status.localSemver})`,
+        `Commit local: ${status.localCommit}`,
+        `Arvore limpa: ${status.localClean ? 'sim' : 'nao'}`,
+    ];
+    if (status.remoteVersion) {
+        steps.push(`Versao remota: ${status.remoteVersion} (${status.remoteSemver})`);
+    }
+    if (status.remoteCommit) {
+        steps.push(`Commit remoto rastreado: ${status.remoteCommit}`);
+    }
+    steps.push(status.recommendedAction);
+    if (status.updateAvailable) {
+        steps.push(buildSuggestedUpdateStep({
+            packageMode: status.localCommit === 'unknown' || status.localBranch === 'unknown',
+            branch,
+        }));
+    }
+    return steps;
+};
+//# sourceMappingURL=update.js.map