@growthub/cli 0.5.1 → 0.6.1

package/dist/starter/source-import/types.d.ts

@@ -0,0 +1,357 @@
+/**
+ * Source Import Agent — canonical types (v1).
+ *
+ * The Source Import Agent converts a *portable source* (a public/private
+ * GitHub repository OR a skills.sh skill) into a starter-derived Custom
+ * Workspace registered as a Growthub fork. It is deliberately a
+ * source-agnostic pipeline that treats "GitHub repo" and "skills.sh skill"
+ * as two first-class source types flowing into the same materializer.
+ *
+ * Architecture: Portable Source → Agent Environment Pipeline.
+ *
+ *   Source A: GitHub repository   ─┐
+ *   Source B: skills.sh skill     ─┤
+ *                                  ├─► source probe
+ *                                  ├─► security inspection
+ *                                  ├─► import plan builder
+ *                                  ├─► starter-derived materializer
+ *                                  ├─► fork registration
+ *                                  ├─► policy + trace + background job
+ *                                  └─► optional Growthub bridge enhancement
+ *
+ * This module introduces NO new storage locations, NO new transport layers,
+ * and NO Paperclip coupling. Every piece of canonical state lives inside
+ * the fork at `<forkPath>/.growthub-fork/` (the same kernel-packet-style
+ * location used by the Fork Sync Agent and Custom Workspace Starter).
+ */
+import type { GithubRepoRef } from "../../github/types.js";
+import type { GithubTokenSource } from "../../integrations/github-resolver.js";
+/**
+ * First-class source types recognised by the pipeline. Keep this union
+ * tight — adding a new source means shipping a new adapter + plan
+ * specialisation, not layering options onto an existing adapter.
+ */
+export type SourceKind = "github-repo" | "skills-skill";
+/**
+ * Controls how the imported source payload is materialised inside the
+ * starter-derived workspace.
+ *
+ *   - "wrap":    imported payload lives under `imported/` inside the
+ *                starter shell. Every starter asset stays intact.
+ *   - "overlay": same as "wrap" PLUS a pointer doc at the workspace root
+ *                (for discovery by agents browsing the tree).
+ *
+ * Aggressive rewrites are deliberately out of scope in v1.
+ */
+export type SourceImportMode = "wrap" | "overlay";
+export interface GithubRepoSourceInput {
+    kind: "github-repo";
+    /** Raw user input — owner/repo, https URL, or ssh-style shorthand. */
+    repo: string;
+    /** Optional branch override. Defaults to the repo's default branch. */
+    branch?: string;
+    /** Optional repo subdirectory (relative to repo root). */
+    subdirectory?: string;
+    /** Hint the repo is private — forces an auth probe before cloning. */
+    privateRepo?: boolean;
+    /**
+     * When true, skip the GitHub API probe. Useful for offline scripted runs
+     * where the caller already knows the repo is public + reachable.
+     */
+    skipProbe?: boolean;
+}
+export interface SkillsSkillSourceInput {
+    kind: "skills-skill";
+    /**
+     * Full skill URL (e.g. `https://skills.sh/<author>/<skill>`) OR the
+     * short "author/skill" identifier. The resolver accepts both.
+     */
+    skillRef: string;
+    /** Optional skill version tag. Defaults to the resolver's "latest". */
+    version?: string;
+    /**
+     * When true, skip the skills.sh metadata probe (used by scripted tests
+     * that pre-stage skill payloads locally).
+     */
+    skipProbe?: boolean;
+}
+export type SourceInput = GithubRepoSourceInput | SkillsSkillSourceInput;
+export interface SourceImportInput {
+    source: SourceInput;
+    /** Destination directory for the imported workspace. */
+    out: string;
+    /** Human label (defaults to basename of `out`). */
+    name?: string;
+    /** Import layout strategy — defaults to "wrap". */
+    importMode?: SourceImportMode;
+    /**
+     * Initial remote-sync policy mode seeded into `.growthub-fork/policy.json`.
+     *   - "off"    (default) — purely local workspace
+     *   - "branch" — push heal branches, no PR
+     *   - "pr"     — push heal branches + open draft PR
+     */
+    remoteSyncMode?: "off" | "branch" | "pr";
+    /** Source kit id to scaffold the starter shell from. */
+    starterKitId?: string;
+    /** Emit machine-readable JSON output. */
+    json?: boolean;
+    /**
+     * Progress callback, mirroring the Fork Sync Agent agent-progress contract.
+     * Every phase emits at least one event.
+     */
+    onProgress?: (step: string) => void;
+    /**
+     * Explicit operator confirmations (by `targetPath`) for actions the planner
+     * flagged as `needsConfirmation`. Skills imports ALWAYS require at least
+     * one confirmation (the security report); non-empty destinations add more.
+     */
+    confirmations?: string[];
+}
+/**
+ * How access to the source was resolved. Mirrors the Fork Sync Agent auth
+ * preference ordering.
+ */
+export type SourceAccessMode = "public" | GithubTokenSource;
+export interface GithubRepoAccessProbe {
+    kind: "github-repo";
+    mode: SourceAccessMode;
+    repo: GithubRepoRef;
+    defaultBranch: string;
+    htmlUrl: string;
+    cloneUrl: string;
+    /** Visibility reported by the GitHub API (when probed). */
+    visibility?: "public" | "private" | "internal" | "unknown";
+    /** Handle of the authenticated user, when known. */
+    authHandle?: string;
+    /** Reasons the probe surfaced (warnings, fallbacks taken, etc.). */
+    warnings: string[];
+}
+/**
+ * skills.sh is a public-by-design catalog — the probe returns metadata but
+ * never attempts authenticated fetches in v1.
+ */
+export interface SkillsSkillAccessProbe {
+    kind: "skills-skill";
+    mode: "public";
+    skillRef: string;
+    /** Canonical "<owner>/<repo>/<skill>" identifier as reported by skills.sh. */
+    skillId: string;
+    /** Resolved skill version string. */
+    version: string;
+    /** Human title. */
+    title: string;
+    /** Author handle as reported by skills.sh. */
+    author: string;
+    /** Short description. */
+    description?: string;
+    /** Browser URL for skill detail. */
+    htmlUrl: string;
+    /** Canonical GitHub repository backing this skill. */
+    repository?: string;
+    /** Canonical GitHub repository URL backing this skill. */
+    repoUrl?: string;
+    /** Skill slug used by the upstream install command. */
+    skillSlug?: string;
+    /** Upstream install command shown on the skills.sh detail page. */
+    installCommand?: string;
+    /** Detail-page summary line used during discovery. */
+    summary?: string;
+    /** Live weekly installs shown on the detail page. */
+    weeklyInstalls?: string;
+    /** Live GitHub stars shown on the detail page. */
+    githubStars?: string;
+    /** First-seen date shown on the detail page. */
+    firstSeen?: string;
+    /** Audit badges shown on the detail page. */
+    audits?: SkillsAuditSummary[];
+    /** Manifest-advertised file list (relative paths). */
+    files: string[];
+    warnings: string[];
+}
+export type SourceAccessProbe = GithubRepoAccessProbe | SkillsSkillAccessProbe;
+export type SkillsBrowseScope = "all" | "trending" | "hot";
+export interface SkillsBrowseQuery {
+    /** Free-text search. */
+    q?: string;
+    /** Page index (1-based). */
+    page?: number;
+    /** Page size (default 20, capped at 50). */
+    pageSize?: number;
+    /** Leaderboard scope. */
+    scope?: SkillsBrowseScope;
+}
+export interface SkillsAuditSummary {
+    name: string;
+    status: "pass" | "warn" | "fail" | "unknown";
+    href?: string;
+}
+export interface SkillsBrowseEntry {
+    /** Canonical "<owner>/<repo>/<skill>" identifier. */
+    skillId: string;
+    title: string;
+    author: string;
+    description?: string;
+    htmlUrl: string;
+    version?: string;
+    repository?: string;
+    skillSlug?: string;
+    rank?: number;
+    weeklyInstalls?: string;
+    githubStars?: string;
+    firstSeen?: string;
+}
+export interface SkillsBrowseResult {
+    query: SkillsBrowseQuery;
+    total?: number;
+    page: number;
+    pageSize: number;
+    scope: SkillsBrowseScope;
+    entries: SkillsBrowseEntry[];
+}
+export type DetectedFramework = "vite" | "next" | "react" | "node-service" | "cli-tool" | "monorepo" | "docs" | "skill" | "unknown";
+export type PackageManager = "pnpm" | "yarn" | "npm" | "bun" | "unknown";
+export interface DetectedRuntimeScripts {
+    build?: string;
+    dev?: string;
+    start?: string;
+    test?: string;
+}
+export interface SourceDetectionReport {
+    framework: DetectedFramework;
+    packageManager: PackageManager;
+    /** Relative path (from payload root) to the app root the agent will wrap. */
+    appRoot: string;
+    /** `.env`-style files detected at the payload root (for operator awareness). */
+    envFiles: string[];
+    /** True when the payload root package.json declares a workspaces array. */
+    isMonorepo: boolean;
+    scripts: DetectedRuntimeScripts;
+    /** Confidence score 0..1 for the overall detection. */
+    confidence: number;
+    /** Non-fatal warnings surfaced to the operator. */
+    warnings: string[];
+}
+export type SourceRiskClass = "safe" | "caution" | "high-risk" | "blocked";
+export type SecurityFindingCategory = "shell-script" | "install-hook" | "external-download" | "suspicious-binary" | "prompt-injection" | "env-mutation" | "network-heavy-setup" | "privileged-instruction" | "unexpected-archive";
+export interface SecurityFinding {
+    category: SecurityFindingCategory;
+    severity: "info" | "caution" | "high-risk" | "blocking";
+    /** Relative path inside the payload. */
+    path: string;
+    /** Human-readable explanation. */
+    message: string;
+    /** Optional matched excerpt (truncated to 120 chars). */
+    excerpt?: string;
+}
+export interface SourceSecurityReport {
+    /** When the inspection ran. */
+    inspectedAt: string;
+    /** Total file count inspected. */
+    filesInspected: number;
+    /** Number of bytes read during inspection (bounded). */
+    bytesInspected: number;
+    /** Individual findings — may be empty for "safe" payloads. */
+    findings: SecurityFinding[];
+    /** Aggregate risk classification. */
+    riskClass: SourceRiskClass;
+    /**
+     * When true, the agent MUST NOT continue even if the operator confirms.
+     * Only set when a finding has severity === "blocking".
+     */
+    blocked: boolean;
+    /**
+     * Operator-facing summary lines rendered into the confirmation prompt.
+     */
+    summaryLines: string[];
+}
+export type ImportActionType = "fetch_source" | "inspect_security" | "materialize_starter_shell" | "place_imported_payload" | "write_import_manifest" | "register_fork" | "seed_policy" | "seed_trace" | "summarize";
+export interface ImportPlanAction {
+    actionType: ImportActionType;
+    /** Relative path inside the destination workspace this action targets. */
+    targetPath: string;
+    description: string;
+    /** Extra structured detail for trace. */
+    detail?: Record<string, unknown>;
+    /**
+     * When true the action requires explicit operator confirmation before
+     * execution. v1 sets this for:
+     *   - any skill import (the security report),
+     *   - non-empty destinations,
+     *   - any finding of severity "caution" or "high-risk".
+     */
+    needsConfirmation?: boolean;
+    /** Short tag shown in the confirmation prompt. */
+    confirmationLabel?: string;
+}
+export interface SourceImportPlan {
+    importId: string;
+    source: SourceAccessProbe;
+    destination: {
+        forkPath: string;
+        starterKitId: string;
+        importMode: SourceImportMode;
+    };
+    detection?: SourceDetectionReport;
+    security?: SourceSecurityReport;
+    actions: ImportPlanAction[];
+    generatedAt: string;
+    warnings: string[];
+}
+/**
+ * Written to `<forkPath>/.growthub-fork/source-import.json` so the agent can
+ * be resumed / audited after the fact. Canonical location; no duplicate
+ * state in CLI-owned homes.
+ */
+export interface SourceImportManifest {
+    version: 1;
+    importId: string;
+    sourceKind: SourceKind;
+    source: SourceAccessProbe;
+    importMode: SourceImportMode;
+    starterKitId: string;
+    starterKitVersion: string;
+    importedAt: string;
+    detection: SourceDetectionReport;
+    security: SourceSecurityReport;
+    payloadRelativePath: string;
+    /** SHA of HEAD at import time, when the source was a git tree. */
+    payloadGitSha?: string;
+    /** Summary lines written to IMPORT_SUMMARY.md for the operator. */
+    summary: string[];
+}
+export interface SourceImportResult {
+    importId: string;
+    forkId: string;
+    kitId: string;
+    forkPath: string;
+    baseVersion: string;
+    sourceKind: SourceKind;
+    source: SourceAccessProbe;
+    importMode: SourceImportMode;
+    payloadRelativePath: string;
+    detection: SourceDetectionReport;
+    security: SourceSecurityReport;
+    summaryPath: string;
+    manifestPath: string;
+    policyMode: "off" | "branch" | "pr";
+    warnings: string[];
+}
+export type SourceImportJobStatus = "pending" | "running" | "awaiting_confirmation" | "completed" | "failed" | "cancelled";
+export interface SourceImportJob {
+    jobId: string;
+    importId: string;
+    sourceKind: SourceKind;
+    status: SourceImportJobStatus;
+    createdAt: string;
+    startedAt?: string;
+    completedAt?: string;
+    /** Populated on success. */
+    result?: SourceImportResult;
+    /** Populated when the job parks on confirmations. */
+    plan?: SourceImportPlan;
+    pendingConfirmations?: string[];
+    error?: string;
+    /** Most recent progress step for UI tail views. */
+    lastStep?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/starter/source-import/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/starter/source-import/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAM/E;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,cAAc,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAAC;AAMlD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,aAAa,CAAC;IACpB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,cAAc,CAAC;IACrB;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,WAAW,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAMzE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,WAAW,CAAC;IACpB,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IACzC,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAMD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAE5D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IAC3D,oDAAoD;IACpD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC9B,sDAAsD;IACtD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAM/E,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,iBAAiB,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,iBAAiB,CAAC;IACzB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAMD,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,MAAM,GACN,OAAO,GACP,cAAc,GACd,UAAU,GACV,UAAU,GACV,MAAM,GACN,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,2EAA2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,sBAAsB,CAAC;IAChC,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3E,MAAM,MAAM,uBAAuB,GAC/B,cAAc,GACd,cAAc,GACd,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,cAAc,GACd,qBAAqB,GACrB,wBAAwB,GACxB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;IACxD,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,qCAAqC;IACrC,SAAS,EAAE,eAAe,CAAC;IAC3B;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAMD,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,kBAAkB,GAClB,2BAA2B,GAC3B,wBAAwB,GACxB,uBAAuB,GACvB,eAAe,GACf,aAAa,GACb,YAAY,GACZ,WAAW,CAAC;AAEhB,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,WAAW,EAAE;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,gBAAgB,CAAC;KAC9B,CAAC;IACF,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,uBAAuB,GACvB,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,qDAAqD;IACrD,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/starter/source-import/types.js

@@ -0,0 +1,28 @@
+/**
+ * Source Import Agent — canonical types (v1).
+ *
+ * The Source Import Agent converts a *portable source* (a public/private
+ * GitHub repository OR a skills.sh skill) into a starter-derived Custom
+ * Workspace registered as a Growthub fork. It is deliberately a
+ * source-agnostic pipeline that treats "GitHub repo" and "skills.sh skill"
+ * as two first-class source types flowing into the same materializer.
+ *
+ * Architecture: Portable Source → Agent Environment Pipeline.
+ *
+ *   Source A: GitHub repository   ─┐
+ *   Source B: skills.sh skill     ─┤
+ *                                  ├─► source probe
+ *                                  ├─► security inspection
+ *                                  ├─► import plan builder
+ *                                  ├─► starter-derived materializer
+ *                                  ├─► fork registration
+ *                                  ├─► policy + trace + background job
+ *                                  └─► optional Growthub bridge enhancement
+ *
+ * This module introduces NO new storage locations, NO new transport layers,
+ * and NO Paperclip coupling. Every piece of canonical state lives inside
+ * the fork at `<forkPath>/.growthub-fork/` (the same kernel-packet-style
+ * location used by the Fork Sync Agent and Custom Workspace Starter).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/starter/source-import/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/starter/source-import/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG"}

package/dist/starter/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Growthub Custom Workspace Starter — canonical types.
+ *
+ * The starter is a thin orchestration adapter over already-shipping
+ * primitives. It introduces no new transport, no new storage location, and
+ * no new auth primitive — it composes the bundled kit catalog, the
+ * Self-Healing Fork Sync Agent registry/policy/trace, and optionally the
+ * first-party GitHub integration.
+ */
+export interface StarterInitOptions {
+    /** Source kit id to scaffold from. Defaults to `growthub-custom-workspace-starter-v1`. */
+    kitId?: string;
+    /** Destination directory. Will be created if it does not exist. */
+    out: string;
+    /** Human label for the resulting fork (defaults to basename of `out`). */
+    name?: string;
+    /** Upstream GitHub repo to create a remote fork against (owner/repo). */
+    upstream?: string;
+    /** Destination org for the GitHub fork, when applicable. */
+    destinationOrg?: string;
+    /** Override the created GitHub fork name. */
+    forkName?: string;
+    /**
+     * Initial remote-sync mode to seed into policy.json.
+     *   - "off"    (default) — purely local workspace
+     *   - "branch" — push heal branches, no PR
+     *   - "pr"     — push heal branches + open draft PR
+     */
+    remoteSyncMode?: "off" | "branch" | "pr";
+    /** Emit machine-readable JSON output. */
+    json?: boolean;
+}
+export interface StarterInitResult {
+    kitId: string;
+    forkId: string;
+    forkPath: string;
+    baseVersion: string;
+    policyMode: "off" | "branch" | "pr";
+    remote?: {
+        owner: string;
+        repo: string;
+        htmlUrl: string;
+        defaultBranch: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/starter/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/starter/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,0FAA0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IACzC,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpC,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH"}

package/dist/starter/types.js

@@ -0,0 +1,11 @@
+/**
+ * Growthub Custom Workspace Starter — canonical types.
+ *
+ * The starter is a thin orchestration adapter over already-shipping
+ * primitives. It introduces no new transport, no new storage location, and
+ * no new auth primitive — it composes the bundled kit catalog, the
+ * Self-Healing Fork Sync Agent registry/policy/trace, and optionally the
+ * first-party GitHub integration.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/starter/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/starter/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/status/probes.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Growthub CLI Statuspage — individual probes.
+ *
+ * Every probe is a self-contained async function returning
+ * `ServiceProbeResult`. No shared mutable state. No direct consumption of
+ * the fork-sync engine or discovery hub; this subsystem can be deleted
+ * cleanly without cascading changes.
+ *
+ * A probe MUST:
+ *   - never throw (catch and surface as "outage" / "degraded")
+ *   - respect the provided AbortSignal-equivalent timeout
+ *   - stay under a few hundred lines of input (never print to console)
+ */
+import type { ServiceProbeResult } from "./types.js";
+export declare function probeGithubApi(timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeNpmRegistry(timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeGrowthubHosted(timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeIntegrationsBridge(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeGithubDirectAuth(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeKitForksIndex(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeBundledKits(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeGit(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeNode(_timeoutMs: number): Promise<ServiceProbeResult>;
+export declare function probeReleaseBundleArtifacts(_timeoutMs: number): Promise<ServiceProbeResult>;
+//# sourceMappingURL=probes.d.ts.map

package/dist/status/probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/status/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA0CrD,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAYnF;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAYrF;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwCxF;AAED,wBAAsB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmC7F;AAMD,wBAAsB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoC3F;AAED,wBAAsB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6BxF;AAED,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmBtF;AAED,wBAAsB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkB9E;AAED,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY/E;AAMD,wBAAsB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgBjG"}