@ken-jo/agent-connector 0.4.94 → 0.4.97

package/dist/{install-NPN77N3S.js → install-WLENR4KF.js}

@@ -3,12 +3,12 @@ import {
   installConnector,
   installViaMarketplace,
   parseInstallMethod
-} from "./chunk-TTKSYJRY.js";
-import "./chunk-B5W3RHTI.js";
-import "./chunk-2Y2MZRLP.js";
-import "./chunk-UM5S7DKK.js";
-import "./chunk-6WZODR3Z.js";
-import "./chunk-OPXAP3AC.js";
+} from "./chunk-MLU7NDAZ.js";
+import "./chunk-LQ55E7QI.js";
+import "./chunk-7C2IPIIB.js";
+import "./chunk-C747DYNT.js";
+import "./chunk-XVEJAFKW.js";
+import "./chunk-XN7S44U4.js";
 import {
   buildConnectorSummary,
   fail,
@@ -17,25 +17,25 @@ import {
   parseTargets,
   print,
   renderInstallResult
-} from "./chunk-TQRLMA2C.js";
-import "./chunk-Z2MRSS2I.js";
-import "./chunk-ZMAJ2XFD.js";
-import "./chunk-KHO5WNTP.js";
+} from "./chunk-N4ENLZEU.js";
+import "./chunk-SLJI5BOM.js";
+import "./chunk-GZZCHJDP.js";
+import "./chunk-4GH2KA7V.js";
 import {
   findConnectorConfig,
   loadConnectorFromPath
-} from "./chunk-KSPMSRVU.js";
-import "./chunk-KJLFGQQM.js";
-import "./chunk-SILKSP2Y.js";
-import "./chunk-NBYKLUF6.js";
-import "./chunk-H53QZQJI.js";
-import "./chunk-BEFVJ2OE.js";
-import "./chunk-MGTDQLJJ.js";
-import "./chunk-4NHXLXSD.js";
-import "./chunk-UMQ6NBQR.js";
+} from "./chunk-3EP5V2F4.js";
+import "./chunk-7ZFK2WEO.js";
+import "./chunk-NDMNMAKP.js";
+import "./chunk-KFPSJRHR.js";
+import "./chunk-PSGTHJQU.js";
+import "./chunk-XXLCMSD3.js";
+import "./chunk-3FINQ2ZF.js";
+import "./chunk-Y3K6KJMS.js";
+import "./chunk-ILWHLGIC.js";
 import {
   sourcesDir
-} from "./chunk-GZGLCCEE.js";
+} from "./chunk-QYOUQCC6.js";
 
 // src/cli/commands/install.ts
 import { parseArgs } from "util";
@@ -47,13 +47,24 @@ import {
   existsSync,
   mkdirSync,
   readdirSync,
+  readFileSync,
   renameSync,
   rmSync,
   writeFileSync
 } from "fs";
 import { tmpdir } from "os";
-import { isAbsolute, join, relative, resolve } from "path";
+import { basename, isAbsolute, join, relative, resolve } from "path";
+import { fileURLToPath } from "url";
 var GITHUB_SEG = /^[A-Za-z0-9._-]+$/;
+var NPM_UNSCOPED_NAME_RE = /^[a-z0-9][a-z0-9._~-]*$/i;
+var NPM_SCOPE_RE = /^@[a-z0-9][a-z0-9._~-]*$/i;
+function isSafeGitHubSegment(segment) {
+  return GITHUB_SEG.test(segment) && segment !== "." && segment !== "..";
+}
+function isSafeSubpath(subpath) {
+  if (subpath === void 0 || subpath === "") return true;
+  return subpath.split("/").every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
 function looksLocal(value) {
   if (value === "") return true;
   if (existsSync(value)) return true;
@@ -92,7 +103,7 @@ function parseRemoteSource(value) {
     }
     const hash = url.hash.replace(/^#/, "");
     if (hash) ref = hash;
-    if (!GITHUB_SEG.test(owner2) || !GITHUB_SEG.test(repo2)) return null;
+    if (!isSafeGitHubSegment(owner2) || !isSafeGitHubSegment(repo2)) return null;
     return cleanRemote({ owner: owner2, repo: repo2, ref, subpath: subpath2 });
   }
   const shorthand = raw.startsWith("github:") ? raw.slice("github:".length) : raw;
@@ -102,7 +113,7 @@ function parseRemoteSource(value) {
   const owner = segs[0];
   const repo = segs[1].replace(/\.git$/, "");
   const subpath = segs.length > 2 ? segs.slice(2).join("/") : void 0;
-  if (!GITHUB_SEG.test(owner) || !GITHUB_SEG.test(repo)) return null;
+  if (!isSafeGitHubSegment(owner) || !isSafeGitHubSegment(repo)) return null;
   return cleanRemote({ owner, repo, ref: refPart, subpath });
 }
 function splitHash(value) {
@@ -116,7 +127,7 @@ function finalizeFromPath(owner, repoAndRest, _ref) {
   const segs = pathPart.split("/").filter(Boolean);
   const repo = (segs[0] ?? "").replace(/\.git$/, "");
   const subpath = segs.length > 1 ? segs.slice(1).join("/") : void 0;
-  if (!GITHUB_SEG.test(owner) || !GITHUB_SEG.test(repo)) return null;
+  if (!isSafeGitHubSegment(owner) || !isSafeGitHubSegment(repo)) return null;
   return cleanRemote({ owner, repo, ref, subpath });
 }
 var REF_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/;
@@ -125,6 +136,7 @@ function isSafeRef(ref) {
 }
 function cleanRemote(r) {
   if (r.ref !== void 0 && !isSafeRef(r.ref)) return null;
+  if (!isSafeSubpath(r.subpath)) return null;
   const out = { owner: r.owner, repo: r.repo };
   if (r.ref) out.ref = r.ref;
   if (r.subpath && r.subpath !== "") out.subpath = r.subpath;
@@ -144,7 +156,75 @@ function parseGitUrl(value) {
   if (ref) out.ref = ref;
   return out;
 }
+function parseNpmSource(value) {
+  const raw = value.trim();
+  if (!raw.startsWith("npm:")) return null;
+  const spec = raw.slice("npm:".length).trim();
+  if (spec === "" || /\s/.test(spec) || spec.startsWith("-")) return null;
+  let packageName;
+  if (spec.startsWith("@")) {
+    const match = spec.match(/^(@[^/@\s]+\/[^/@\s]+)(?:@([^/\s]+))?$/);
+    if (!match) return null;
+    packageName = match[1];
+  } else {
+    const match = spec.match(/^([^/@\s]+)(?:@([^/\s]+))?$/);
+    if (!match) return null;
+    packageName = match[1];
+  }
+  const parts = packageName.startsWith("@") ? packageName.split("/") : [packageName];
+  if (parts.length === 2) {
+    if (!NPM_SCOPE_RE.test(parts[0]) || !NPM_UNSCOPED_NAME_RE.test(parts[1])) {
+      return null;
+    }
+  } else if (parts.length === 1) {
+    if (!NPM_UNSCOPED_NAME_RE.test(parts[0])) return null;
+  } else {
+    return null;
+  }
+  return {
+    sourceKind: "npm",
+    owner: "npm",
+    repo: packageName.replace(/^@/, "").replace(/\//g, "__"),
+    packageName,
+    packageSpec: spec
+  };
+}
+function stripQueryAndHash(value) {
+  return value.split(/[?#]/, 1)[0] ?? value;
+}
+function archivePathname(value) {
+  try {
+    const url = new URL(value);
+    return url.pathname;
+  } catch {
+    return value;
+  }
+}
+function isTarballLike(value) {
+  const p = stripQueryAndHash(archivePathname(value)).toLowerCase();
+  return p.endsWith(".tgz") || p.endsWith(".tar.gz");
+}
+function parseArchiveSource(value) {
+  const raw = value.trim();
+  const explicit = raw.startsWith("archive:");
+  const source = explicit ? raw.slice("archive:".length).trim() : raw;
+  if (source === "") return null;
+  if (!explicit && !isTarballLike(source)) return null;
+  const pathish = stripQueryAndHash(archivePathname(source));
+  const base = basename(pathish).replace(/\.tar\.gz$/i, "").replace(/\.tgz$/i, "");
+  const repo = base || "source";
+  return {
+    sourceKind: "archive",
+    owner: "archive",
+    repo,
+    archiveUrl: source
+  };
+}
 function classifySource(value) {
+  const npm = parseNpmSource(value);
+  if (npm) return { kind: "remote", remote: npm };
+  const archive = parseArchiveSource(value);
+  if (archive) return { kind: "remote", remote: archive };
   const gitUrl = parseGitUrl(value);
   if (gitUrl) return { kind: "remote", remote: gitUrl };
   if (looksLocal(value)) return { kind: "local", value };
@@ -152,6 +232,9 @@ function classifySource(value) {
   return remote ? { kind: "remote", remote } : null;
 }
 function cloneUrl(r) {
+  if (r.sourceKind === "npm" || r.sourceKind === "archive") {
+    throw new Error(`${describeRemote(r)} is not a git clone source`);
+  }
   return r.cloneUrl ?? `https://github.com/${r.owner}/${r.repo}.git`;
 }
 function tarballUrl(r) {
@@ -160,6 +243,12 @@ function tarballUrl(r) {
 }
 function sourceCacheDir(r) {
   const safe = (s) => s.replace(/[^A-Za-z0-9._-]/g, "-");
+  if (r.sourceKind === "npm") {
+    return join(sourcesDir(), `npm__${safe(r.packageName ?? r.repo)}__${shortHash(r.packageSpec ?? r.repo)}`);
+  }
+  if (r.sourceKind === "archive") {
+    return join(sourcesDir(), `archive__${safe(r.repo)}__${shortHash(r.archiveUrl ?? r.repo)}`);
+  }
   const base = r.cloneUrl ? `${safe(r.owner)}__${safe(r.repo)}__${shortHash(r.cloneUrl)}` : `${safe(r.owner)}__${safe(r.repo)}`;
   const name = r.ref ? `${base}__${safe(r.ref)}` : base;
   return join(sourcesDir(), name);
@@ -177,6 +266,9 @@ function gitAvailable() {
 }
 function makeGitFetcher(urlFor = cloneUrl) {
   return (remote, dest) => {
+    if (remote.sourceKind === "npm" || remote.sourceKind === "archive") {
+      throw new Error(`${describeRemote(remote)} is not a git clone source`);
+    }
     if (!gitAvailable()) {
       throw new Error(
         "git is required to fetch a remote connector source but was not found on PATH. Install git, or pass a local --connector <path>."
@@ -202,7 +294,9 @@ async function tarballFetch(remote, dest) {
   if (!res.ok) {
     throw new Error(`failed to download ${url}: HTTP ${res.status} ${res.statusText}`);
   }
-  const buf = Buffer.from(await res.arrayBuffer());
+  await extractTarballBuffer(Buffer.from(await res.arrayBuffer()), dest);
+}
+function extractTarballBuffer(buf, dest) {
   const work = join(tmpdir(), `ac-src-${process.pid}-${Date.now()}`);
   mkdirSync(work, { recursive: true });
   const tarPath = join(work, "source.tar.gz");
@@ -221,7 +315,75 @@ async function tarballFetch(remote, dest) {
   renameSync(top, dest);
   rmSync(work, { recursive: true, force: true });
 }
+async function archiveFetch(remote, dest) {
+  const source = remote.archiveUrl;
+  if (!source) throw new Error("archive source is missing archiveUrl");
+  if (/^https?:\/\//i.test(source)) {
+    const res = await fetch(source);
+    if (!res.ok) {
+      throw new Error(`failed to download ${source}: HTTP ${res.status} ${res.statusText}`);
+    }
+    await extractTarballBuffer(Buffer.from(await res.arrayBuffer()), dest);
+    return;
+  }
+  const archivePath = source.startsWith("file://") ? fileURLToPath(source) : source;
+  if (!existsSync(archivePath)) {
+    throw new Error(`archive source not found: ${source}`);
+  }
+  extractTarballBuffer(readFileSync(archivePath), dest);
+}
+function npmAvailable() {
+  try {
+    execFileSync("npm", ["--version"], { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function npmFetch(remote, dest) {
+  const spec = remote.packageSpec;
+  if (!spec) throw new Error("npm source is missing packageSpec");
+  if (!npmAvailable()) {
+    throw new Error(
+      `npm is required to fetch npm:${spec} but was not found on PATH. Install npm, or pass a local --connector <path>.`
+    );
+  }
+  const work = join(tmpdir(), `ac-npm-${process.pid}-${Date.now()}`);
+  mkdirSync(work, { recursive: true });
+  let stdout;
+  try {
+    stdout = execFileSync(
+      "npm",
+      ["pack", spec, "--pack-destination", work, "--silent"],
+      { encoding: "utf8" }
+    );
+  } catch (err) {
+    rmSync(work, { recursive: true, force: true });
+    throw new Error(
+      `failed to fetch npm:${spec}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+  const packed = stdout.trim().split(/\r?\n/).filter(Boolean).pop();
+  if (!packed) {
+    rmSync(work, { recursive: true, force: true });
+    throw new Error(`failed to fetch npm:${spec}: npm pack produced no tarball`);
+  }
+  const tarPath = isAbsolute(packed) ? packed : join(work, packed);
+  try {
+    extractTarballBuffer(readFileSync(tarPath), dest);
+  } finally {
+    rmSync(work, { recursive: true, force: true });
+  }
+}
 var gitFetcher = async (remote, dest) => {
+  if (remote.sourceKind === "npm") {
+    await npmFetch(remote, dest);
+    return;
+  }
+  if (remote.sourceKind === "archive") {
+    await archiveFetch(remote, dest);
+    return;
+  }
   if (gitAvailable()) {
     makeGitFetcher()(remote, dest);
     return;
@@ -286,6 +448,8 @@ function findConfigWithin(dir) {
   return hitDir === dirAbs ? hit : null;
 }
 function describeRemote(r) {
+  if (r.sourceKind === "npm") return `npm:${r.packageSpec ?? r.repo}`;
+  if (r.sourceKind === "archive") return `archive:${r.archiveUrl ?? r.repo}`;
   let s = r.cloneUrl ?? `${r.owner}/${r.repo}`;
   if (r.subpath) s += `/${r.subpath}`;
   if (r.ref) s += `#${r.ref}`;
@@ -336,7 +500,7 @@ async function run(argv) {
   const spec = source != null ? classifySource(source) : null;
   if (source != null && spec == null) {
     return fail(
-      `"${source}" is not a local path or a recognizable GitHub source (owner/repo[/subpath][#ref], a github.com URL, git@github.com:\u2026, or github:owner/repo).`
+      `"${source}" is not a local path or a recognizable connector source (owner/repo[/subpath][#ref], github URL, git URL, npm:<package>[@version], archive:<path-or-url>, or .tgz/.tar.gz).`
     );
   }
   if (spec != null && spec.kind === "remote") {
@@ -350,7 +514,7 @@ async function run(argv) {
     const configPath = source ?? findConnectorConfig(projectDir);
     if (!configPath) {
       return fail(
-        "no connector config found. Pass a <source> (local path or owner/repo) or --connector <path>, or add an agent-connector.config.{mjs,js,json} to your project."
+        "no connector config found. Pass a <source> (local path, owner/repo, npm:<package>, or archive tarball) or --connector <path>, or add an agent-connector.config.{mjs,js,json} to your project."
       );
     }
     ({ connector, modulePath } = await loadConnectorFromPath(configPath));
@@ -379,4 +543,4 @@ async function run(argv) {
 export {
   run
 };
-//# sourceMappingURL=install-NPN77N3S.js.map
+//# sourceMappingURL=install-WLENR4KF.js.map

package/dist/install-WLENR4KF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/install.ts","../src/core/fetch-source.ts"],"sourcesContent":["/**\r\n * cli/commands/install — deploy a connector across its target platforms.\r\n *\r\n * Resolves the connector config (--connector <path>, else findConnectorConfig\r\n * walking up from the project dir), loads it into a live ResolvedConnector, and\r\n * hands it to the chosen DELIVERY METHOD's orchestration:\r\n *\r\n *   --method direct      (default) — the installer renders each host's native\r\n *                        MCP + hook + content config in place (zero behavior\r\n *                        change for existing scripts).\r\n *   --method marketplace — stage the connector's plugin bundle under the\r\n *                        data-root and DRIVE the host's own plugin/marketplace\r\n *                        install flow (v1 driver: claude-code; other hosts get\r\n *                        never-silent skip/warn records with manual commands).\r\n *\r\n * Both methods emit the same ChangeRecords, rendered as a readable diff;\r\n * --dry-run renders the plan without writing or spawning. A double-install\r\n * guard (both directions) enforces exactly one method per (connector, host,\r\n * scope) — a refusal is a `warn` record, so the exit-1-on-warn convention\r\n * carries over.\r\n */\r\n\r\nimport { parseArgs } from \"node:util\";\r\n\r\nimport { installConnector } from \"../../core/installer.js\";\r\nimport { installViaMarketplace, parseInstallMethod } from \"../../core/marketplace.js\";\r\nimport { findConnectorConfig, loadConnectorFromPath } from \"../../core/load-connector.js\";\r\nimport { classifySource, resolveRemoteSource } from \"../../core/fetch-source.js\";\r\nimport {\r\n  buildConnectorSummary,\r\n  fail,\r\n  maybePrintBanner,\r\n  parseScope,\r\n  parseTargets,\r\n  print,\r\n  renderInstallResult,\r\n} from \"../app.js\";\r\n\r\nexport async function run(argv: string[]): Promise<number> {\r\n  const { values, positionals } = parseArgs({\r\n    args: argv,\r\n    options: {\r\n      method: { type: \"string\", default: \"direct\" },\r\n      scope: { type: \"string\", default: \"user\" },\r\n      targets: { type: \"string\" },\r\n      connector: { type: \"string\" },\r\n      project: { type: \"string\" },\r\n      \"dry-run\": { type: \"boolean\", default: false },\r\n      // Memory surface: overwrite USER-EDITED managed blocks (hash drift).\r\n      // Default behavior is warn-and-leave; --force backs the file up first.\r\n      force: { type: \"boolean\", default: false },\r\n      // Decorative-banner suppressor (no effect on command output bytes).\r\n      quiet: { type: \"boolean\", default: false },\r\n    },\r\n    // A single positional <source> (local path OR remote GitHub spec) is the\r\n    // ergonomic alias of --connector; either may be remote.\r\n    allowPositionals: true,\r\n  });\r\n\r\n  maybePrintBanner({ quiet: values.quiet });\r\n\r\n  const method = parseInstallMethod(values.method);\r\n  if (method == null) {\r\n    return fail(`invalid --method \"${values.method}\" (use direct|marketplace)`);\r\n  }\r\n\r\n  const projectDir = values.project ?? process.cwd();\r\n\r\n  // A connector source may arrive as the first positional or via --connector,\n  // and may be a LOCAL path or a REMOTE source spec (GitHub/raw git, npm:, or\n  // archive tarball). The positional and the flag are equivalent; reject\n  // ambiguity when both name a source.\n  const positionalSource = positionals[0];\r\n  if (positionalSource != null && values.connector != null) {\r\n    return fail(\"pass a connector source as EITHER the positional <source> OR --connector, not both.\");\r\n  }\r\n  const source = positionalSource ?? values.connector;\r\n\r\n  const scope = parseScope(values.scope);\r\n  if (scope == null) return fail(`invalid --scope \"${values.scope}\" (use user|project)`);\r\n  if (method === \"marketplace\" && scope !== \"user\") {\r\n    return fail(\r\n      \"--method marketplace supports --scope user only (project-scope plugin installs are deferred)\",\r\n    );\r\n  }\r\n\r\n  // Resolve the source to a loadable connector. A REMOTE spec is fetched into a\r\n  // STABLE cache dir under the data-root and GATED (must be an agent-connector\r\n  // package) before handing off to the existing install flow. A LOCAL source —\r\n  // or no source at all — keeps today's path-discovery behavior unchanged.\r\n  let connector: Awaited<ReturnType<typeof loadConnectorFromPath>>[\"connector\"];\r\n  let modulePath: string;\r\n  const spec = source != null ? classifySource(source) : null;\r\n  if (source != null && spec == null) {\n    return fail(\n      `\"${source}\" is not a local path or a recognizable connector source ` +\n        \"(owner/repo[/subpath][#ref], github URL, git URL, npm:<package>[@version], archive:<path-or-url>, or .tgz/.tar.gz).\",\n    );\n  }\n  if (spec != null && spec.kind === \"remote\") {\r\n    try {\r\n      const resolved = await resolveRemoteSource(spec.remote);\r\n      ({ connector, modulePath } = resolved);\r\n    } catch (err) {\r\n      return fail(err instanceof Error ? err.message : String(err));\r\n    }\r\n  } else {\r\n    const configPath = source ?? findConnectorConfig(projectDir);\r\n    if (!configPath) {\n      return fail(\n        \"no connector config found. Pass a <source> (local path, owner/repo, npm:<package>, or archive tarball) or \" +\n          \"--connector <path>, or add an agent-connector.config.{mjs,js,json} to your project.\",\n      );\n    }\n    ({ connector, modulePath } = await loadConnectorFromPath(configPath));\r\n  }\r\n\r\n  const targets = parseTargets(values.targets);\r\n\r\n  const result =\r\n    method === \"marketplace\"\r\n      ? await installViaMarketplace({\r\n          connector,\r\n          modulePath,\r\n          scope,\r\n          projectDir,\r\n          dryRun: values[\"dry-run\"],\r\n          ...(targets ? { targets } : {}),\r\n        })\r\n      : await installConnector({\r\n          connector,\r\n          modulePath,\r\n          scope,\r\n          projectDir,\r\n          dryRun: values[\"dry-run\"],\r\n          force: values.force,\r\n          ...(targets ? { targets } : {}),\r\n        });\r\n\r\n  result.connector = buildConnectorSummary(connector);\r\n  print(renderInstallResult(result, \"install\"));\r\n  return result.changes.some((c) => c.action === \"warn\") ? 1 : 0;\r\n}\r\n","/**\r\n * core/fetch-source — resolve an `install <source>` argument that may be a\r\n * LOCAL path OR a REMOTE package/source spec into a local connector-config path.\n *\r\n * Responsibilities (MVP):\r\n *   1. CLASSIFY a source string as local-path vs. remote GitHub spec. A value\r\n *      that exists on disk, or that looks like a filesystem path (starts with\r\n *      `.`, `/`, `~`, a `file://` URL, or a Windows drive/UNC), stays LOCAL and\r\n *      keeps today's behavior. Everything else is parsed as a remote spec.\r\n *   2. PARSE the supported remote forms:\n *        owner/repo · owner/repo#ref · owner/repo/sub · owner/repo/sub#ref\n *        github:owner/repo · https://github.com/owner/repo[/tree/ref/sub]\n *        git@github.com:owner/repo.git · the .git suffix on any of the above.\n *        npm:<package>[@version] · archive:<path-or-url> · *.tgz / *.tar.gz\n *   3. FETCH + PERSIST the repo to a STABLE cache dir under the data-root\r\n *      (`sources/<owner>__<repo>[__<ref>]/`), NOT a temp dir, so a connector\r\n *      with a local stdio server keeps resolving after install. Re-fetch updates\r\n *      it. `git clone --depth 1` is preferred; a codeload tarball is the\r\n *      fallback when `git` is unavailable.\r\n *   4. GATE: the fetched (sub)dir MUST contain an `agent-connector.config.*`\r\n *      that loads — otherwise the target is not an agent-connector connector.\r\n *\r\n * The actual fetch is injected via a {@link Fetcher} seam so tests can drive the\r\n * pipeline against a `file://` git fixture without any real network/GitHub hit.\r\n */\r\n\r\nimport { execFileSync } from \"node:child_process\";\r\nimport { createHash } from \"node:crypto\";\r\nimport {\r\n  existsSync,\r\n  mkdirSync,\n  readdirSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { basename, isAbsolute, join, relative, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\r\nimport { findConnectorConfig, loadConnectorFromPath } from \"./load-connector.js\";\r\nimport { sourcesDir } from \"./paths.js\";\r\nimport type { ResolvedConnector } from \"./types.js\";\r\n\r\n/** A parsed remote source to fetch (a GitHub spec, or a raw git clone URL such\r\n *  as `file://`/`ssh://`/`git@…`). `ref` is a branch/tag/sha; `subpath` is the\r\n *  directory within the repo that holds the connector config. */\r\nexport interface RemoteSource {\n  owner: string;\n  repo: string;\n  /**\n   * Non-git source kind. Omitted for GitHub/raw-git sources to preserve the\n   * original object shape used by tests and callers.\n   */\n  sourceKind?: \"npm\" | \"archive\";\n  /** Branch / tag / commit. Undefined → the repo default branch. */\n  ref?: string;\n  /** Sub-directory inside the repo holding the connector config. */\n  subpath?: string;\n  /**\r\n   * A raw clone URL (file://, ssh://, git@host:…, https://non-github) when the\r\n   * source is NOT a github.com owner/repo we can derive a URL for. Present → the\r\n   * tarball fallback is unavailable (we can only `git clone` it).\r\n   */\n  cloneUrl?: string;\n  /** npm package spec for sourceKind:\"npm\", e.g. \"@acme/db-mcp@1.2.3\". */\n  packageSpec?: string;\n  /** npm package name without version/tag, e.g. \"@acme/db-mcp\". */\n  packageName?: string;\n  /** Tarball path or URL for sourceKind:\"archive\". */\n  archiveUrl?: string;\n}\n\r\n/** The classification of an `install <source>` argument. */\r\nexport type SourceSpec =\r\n  | { kind: \"local\"; value: string }\r\n  | { kind: \"remote\"; remote: RemoteSource };\r\n\r\nconst GITHUB_SEG = /^[A-Za-z0-9._-]+$/;\nconst NPM_UNSCOPED_NAME_RE = /^[a-z0-9][a-z0-9._~-]*$/i;\nconst NPM_SCOPE_RE = /^@[a-z0-9][a-z0-9._~-]*$/i;\n\r\nfunction isSafeGitHubSegment(segment: string): boolean {\r\n  return GITHUB_SEG.test(segment) && segment !== \".\" && segment !== \"..\";\r\n}\r\n\r\nfunction isSafeSubpath(subpath: string | undefined): boolean {\r\n  if (subpath === undefined || subpath === \"\") return true;\r\n  return subpath\r\n    .split(\"/\")\r\n    .every((segment) => segment !== \"\" && segment !== \".\" && segment !== \"..\");\r\n}\r\n\r\n/**\r\n * True when `value` should be treated as a LOCAL path (existing behavior),\r\n * before any remote-spec parse is attempted. Conservative on purpose: a path\r\n * that exists wins, and the common path sigils (`.`, `/`, `~`, `file://`, a\r\n * Windows drive letter or UNC) are local even when nothing is on disk yet.\r\n */\r\nexport function looksLocal(value: string): boolean {\r\n  if (value === \"\") return true;\r\n  if (existsSync(value)) return true;\r\n  if (\r\n    value.startsWith(\"./\") ||\r\n    value.startsWith(\"../\") ||\r\n    value === \".\" ||\r\n    value === \"..\" ||\r\n    value.startsWith(\"/\") ||\r\n    value.startsWith(\"~\") ||\r\n    value.startsWith(\"file://\")\r\n  ) {\r\n    return true;\r\n  }\r\n  // Windows drive (C:\\ or C:/) or UNC (\\\\server\\share).\r\n  if (/^[A-Za-z]:[\\\\/]/.test(value) || value.startsWith(\"\\\\\\\\\")) return true;\r\n  return false;\r\n}\r\n\r\n/**\r\n * Parse a remote GitHub spec into a {@link RemoteSource}, or null when `value`\r\n * is not a recognizable GitHub source. Supports the bare `owner/repo[/sub][#ref]`\r\n * shorthand, `github:owner/repo`, full `https://github.com/...` (incl.\r\n * `/tree/<ref>/<subpath>`), and `git@github.com:owner/repo.git`.\r\n */\r\nexport function parseRemoteSource(value: string): RemoteSource | null {\r\n  const raw = value.trim();\r\n  if (raw === \"\") return null;\r\n\r\n  // ── git@github.com:owner/repo(.git) ───────────────────────────────────────\r\n  const scp = raw.match(/^git@github\\.com:([^/]+)\\/(.+?)(?:\\.git)?$/);\r\n  if (scp) {\r\n    return finalizeFromPath(scp[1]!, scp[2]!, undefined);\r\n  }\r\n\r\n  // ── https://github.com/owner/repo[/tree/<ref>/<subpath>][.git][#ref] ───────\r\n  if (/^https?:\\/\\//i.test(raw) || raw.startsWith(\"git://\")) {\r\n    let url: URL;\r\n    try {\r\n      url = new URL(raw.replace(/^git:\\/\\//, \"https://\"));\r\n    } catch {\r\n      return null;\r\n    }\r\n    if (!/(^|\\.)github\\.com$/i.test(url.hostname)) return null;\r\n    const segs = url.pathname.replace(/^\\/+/, \"\").split(\"/\").filter(Boolean);\r\n    if (segs.length < 2) return null;\r\n    const owner = segs[0]!;\r\n    let repo = segs[1]!.replace(/\\.git$/, \"\");\r\n    let ref: string | undefined;\r\n    let subpath: string | undefined;\r\n    // /tree/<ref>/<subpath...> selects a ref + sub-directory.\r\n    if (segs[2] === \"tree\" || segs[2] === \"blob\") {\r\n      ref = segs[3];\r\n      if (segs.length > 4) subpath = segs.slice(4).join(\"/\");\r\n    } else if (segs.length > 2) {\r\n      subpath = segs.slice(2).join(\"/\");\r\n    }\r\n    const hash = url.hash.replace(/^#/, \"\");\r\n    if (hash) ref = hash;\r\n    if (!isSafeGitHubSegment(owner) || !isSafeGitHubSegment(repo)) return null;\r\n    return cleanRemote({ owner, repo, ref, subpath });\r\n  }\r\n\r\n  // ── github:owner/repo[...] ────────────────────────────────────────────────\r\n  const shorthand = raw.startsWith(\"github:\") ? raw.slice(\"github:\".length) : raw;\r\n\r\n  // ── owner/repo[/subpath][#ref] ────────────────────────────────────────────\r\n  // Reject anything that doesn't look like the bare `owner/repo` shape (a single\r\n  // path segment, or a leading slash) so we never misread a stray token.\r\n  const [pathPart, refPart] = splitHash(shorthand);\r\n  const segs = pathPart.split(\"/\").filter(Boolean);\r\n  if (segs.length < 2) return null;\r\n  const owner = segs[0]!;\r\n  const repo = segs[1]!.replace(/\\.git$/, \"\");\r\n  const subpath = segs.length > 2 ? segs.slice(2).join(\"/\") : undefined;\r\n  if (!isSafeGitHubSegment(owner) || !isSafeGitHubSegment(repo)) return null;\r\n  return cleanRemote({ owner, repo, ref: refPart, subpath });\r\n}\r\n\r\n/** Split a \"<path>#<ref>\" into [path, ref?]. */\r\nfunction splitHash(value: string): [string, string | undefined] {\r\n  const i = value.indexOf(\"#\");\r\n  if (i === -1) return [value, undefined];\r\n  const ref = value.slice(i + 1).trim();\r\n  return [value.slice(0, i), ref === \"\" ? undefined : ref];\r\n}\r\n\r\n/** scp-form helper: the repo half may itself carry `/sub` and `#ref`. */\r\nfunction finalizeFromPath(owner: string, repoAndRest: string, _ref: undefined): RemoteSource | null {\r\n  const [pathPart, ref] = splitHash(repoAndRest);\r\n  const segs = pathPart.split(\"/\").filter(Boolean);\r\n  const repo = (segs[0] ?? \"\").replace(/\\.git$/, \"\");\r\n  const subpath = segs.length > 1 ? segs.slice(1).join(\"/\") : undefined;\r\n  if (!isSafeGitHubSegment(owner) || !isSafeGitHubSegment(repo)) return null;\r\n  return cleanRemote({ owner, repo, ref, subpath });\r\n}\r\n\r\n/**\r\n * A git-refname-safe ref charset: branch/tag/sha names plus the `/`, `.`, `_`,\r\n * `-` they may contain. A LEADING `-` is rejected so a ref can never be read as\r\n * a git flag (e.g. `--upload-pack=…`) when passed to `git clone --branch`, and\r\n * the constrained charset keeps cache-dir names clean. Empty is invalid.\r\n */\r\nconst REF_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/;\r\n\r\n/** True when `ref` is a safe git refname (defense-in-depth before exec). */\r\nexport function isSafeRef(ref: string): boolean {\r\n  return REF_RE.test(ref);\r\n}\r\n\r\n/**\r\n * Drop empty optional fields so equality/snapshot comparisons stay clean.\r\n * Returns null when a present `ref` is not git-refname-safe (defense-in-depth:\r\n * never pass an attacker-shaped ref to `git clone --branch`).\r\n */\r\nfunction cleanRemote(r: RemoteSource): RemoteSource | null {\r\n  if (r.ref !== undefined && !isSafeRef(r.ref)) return null;\r\n  if (!isSafeSubpath(r.subpath)) return null;\r\n  const out: RemoteSource = { owner: r.owner, repo: r.repo };\r\n  if (r.ref) out.ref = r.ref;\r\n  if (r.subpath && r.subpath !== \"\") out.subpath = r.subpath;\r\n  return out;\r\n}\r\n\r\n/**\r\n * Parse a RAW git clone URL (NOT a github.com owner/repo): `file://…`,\r\n * `ssh://…`, `git@host:owner/repo`, or `https://<non-github>/…`. These are\r\n * `git clone`-able directly. A trailing `#ref` selects a branch/tag/sha. These\r\n * forms point at a repo root (no in-URL subpath). Returns null for anything\r\n * that isn't a clone URL.\r\n */\r\nexport function parseGitUrl(value: string): RemoteSource | null {\n  const [urlPart, ref] = splitHash(value.trim());\r\n  const isScheme =\r\n    urlPart.startsWith(\"file://\") ||\r\n    urlPart.startsWith(\"ssh://\") ||\r\n    urlPart.startsWith(\"git://\") ||\r\n    /^https?:\\/\\//i.test(urlPart);\r\n  const isScp = /^[^@\\s]+@[^:\\s]+:.+/.test(urlPart) && !urlPart.startsWith(\"git@github.com:\");\r\n  if (!isScheme && !isScp) return null;\r\n  // Reject an unsafe ref (e.g. a leading-dash flag) before it reaches git.\r\n  if (ref !== undefined && !isSafeRef(ref)) return null;\r\n\r\n  // Derive a stable owner/repo cache key from the URL's last two path segments.\r\n  const stripped = urlPart.replace(/\\.git$/, \"\").replace(/\\/+$/, \"\");\r\n  const segs = stripped.split(/[/:]/).filter(Boolean);\r\n  const repo = segs[segs.length - 1] ?? \"repo\";\r\n  const owner = segs[segs.length - 2] ?? \"git\";\r\n  const out: RemoteSource = { owner, repo, cloneUrl: urlPart };\r\n  if (ref) out.ref = ref;\r\n  return out;\r\n}\n\n/** Parse an explicit npm source: npm:<package>[@version-or-tag]. */\nexport function parseNpmSource(value: string): RemoteSource | null {\n  const raw = value.trim();\n  if (!raw.startsWith(\"npm:\")) return null;\n  const spec = raw.slice(\"npm:\".length).trim();\n  if (spec === \"\" || /\\s/.test(spec) || spec.startsWith(\"-\")) return null;\n\n  let packageName: string;\n  if (spec.startsWith(\"@\")) {\n    const match = spec.match(/^(@[^/@\\s]+\\/[^/@\\s]+)(?:@([^/\\s]+))?$/);\n    if (!match) return null;\n    packageName = match[1]!;\n  } else {\n    const match = spec.match(/^([^/@\\s]+)(?:@([^/\\s]+))?$/);\n    if (!match) return null;\n    packageName = match[1]!;\n  }\n\n  const parts = packageName.startsWith(\"@\") ? packageName.split(\"/\") : [packageName];\n  if (parts.length === 2) {\n    if (!NPM_SCOPE_RE.test(parts[0]!) || !NPM_UNSCOPED_NAME_RE.test(parts[1]!)) {\n      return null;\n    }\n  } else if (parts.length === 1) {\n    if (!NPM_UNSCOPED_NAME_RE.test(parts[0]!)) return null;\n  } else {\n    return null;\n  }\n\n  return {\n    sourceKind: \"npm\",\n    owner: \"npm\",\n    repo: packageName.replace(/^@/, \"\").replace(/\\//g, \"__\"),\n    packageName,\n    packageSpec: spec,\n  };\n}\n\nfunction stripQueryAndHash(value: string): string {\n  return value.split(/[?#]/, 1)[0] ?? value;\n}\n\nfunction archivePathname(value: string): string {\n  try {\n    const url = new URL(value);\n    return url.pathname;\n  } catch {\n    return value;\n  }\n}\n\nfunction isTarballLike(value: string): boolean {\n  const p = stripQueryAndHash(archivePathname(value)).toLowerCase();\n  return p.endsWith(\".tgz\") || p.endsWith(\".tar.gz\");\n}\n\n/** Parse a tarball archive source: archive:<path-or-url> or direct *.tgz/*.tar.gz. */\nexport function parseArchiveSource(value: string): RemoteSource | null {\n  const raw = value.trim();\n  const explicit = raw.startsWith(\"archive:\");\n  const source = explicit ? raw.slice(\"archive:\".length).trim() : raw;\n  if (source === \"\") return null;\n  if (!explicit && !isTarballLike(source)) return null;\n\n  const pathish = stripQueryAndHash(archivePathname(source));\n  const base = basename(pathish).replace(/\\.tar\\.gz$/i, \"\").replace(/\\.tgz$/i, \"\");\n  const repo = base || \"source\";\n  return {\n    sourceKind: \"archive\",\n    owner: \"archive\",\n    repo,\n    archiveUrl: source,\n  };\n}\n\r\n/**\r\n * Classify an `install <source>` argument. A raw git clone URL (file://, ssh://,\r\n * git@…) or a GitHub spec is REMOTE (a fetch); a local FILESYSTEM path (existing\r\n * or path-shaped, EXCLUDING file:// which is a clone URL) keeps today's\r\n * behavior. Returns null when a non-local value is NOT a recognizable remote.\r\n */\r\nexport function classifySource(value: string): SourceSpec | null {\n  const npm = parseNpmSource(value);\n  if (npm) return { kind: \"remote\", remote: npm };\n  const archive = parseArchiveSource(value);\n  if (archive) return { kind: \"remote\", remote: archive };\n  // A raw git clone URL (incl. file://) is always a FETCH, never a config path —\n  // even though file:// is \"path-shaped\" it names a clonable repo, not a config.\n  const gitUrl = parseGitUrl(value);\r\n  if (gitUrl) return { kind: \"remote\", remote: gitUrl };\r\n  if (looksLocal(value)) return { kind: \"local\", value };\r\n  const remote = parseRemoteSource(value);\r\n  return remote ? { kind: \"remote\", remote } : null;\r\n}\r\n\r\n/** The clone URL for a remote source (its raw cloneUrl, else the github URL). */\r\nexport function cloneUrl(r: RemoteSource): string {\n  if (r.sourceKind === \"npm\" || r.sourceKind === \"archive\") {\n    throw new Error(`${describeRemote(r)} is not a git clone source`);\n  }\n  return r.cloneUrl ?? `https://github.com/${r.owner}/${r.repo}.git`;\n}\n\r\n/** The codeload tarball URL for a github source (default branch when no ref). */\r\nexport function tarballUrl(r: RemoteSource): string {\r\n  const ref = r.ref ?? \"HEAD\";\r\n  return `https://codeload.github.com/${r.owner}/${r.repo}/tar.gz/${ref}`;\r\n}\r\n\r\n/** The STABLE cache directory a remote source is fetched into. */\r\nexport function sourceCacheDir(r: RemoteSource): string {\n  const safe = (s: string) => s.replace(/[^A-Za-z0-9._-]/g, \"-\");\n  if (r.sourceKind === \"npm\") {\n    return join(sourcesDir(), `npm__${safe(r.packageName ?? r.repo)}__${shortHash(r.packageSpec ?? r.repo)}`);\n  }\n  if (r.sourceKind === \"archive\") {\n    return join(sourcesDir(), `archive__${safe(r.repo)}__${shortHash(r.archiveUrl ?? r.repo)}`);\n  }\n  // A raw clone URL hashes its full URL into the key so two different file://\n  // repos that share an owner/repo basename never collide in the cache.\n  const base = r.cloneUrl\r\n    ? `${safe(r.owner)}__${safe(r.repo)}__${shortHash(r.cloneUrl)}`\r\n    : `${safe(r.owner)}__${safe(r.repo)}`;\r\n  const name = r.ref ? `${base}__${safe(r.ref)}` : base;\r\n  return join(sourcesDir(), name);\r\n}\r\n\r\n/** A short, filename-safe hash for disambiguating raw clone URLs in the cache. */\r\nfunction shortHash(value: string): string {\r\n  return createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 8);\r\n}\r\n\r\n/**\r\n * A fetcher fetches `remote` into the stable directory `dest`. Injected so tests\r\n * can drive the resolve pipeline against a `file://` git fixture (no network).\r\n * The default {@link gitFetcher} clones over HTTPS.\r\n */\r\nexport type Fetcher = (remote: RemoteSource, dest: string) => void | Promise<void>;\r\n\r\n/** True when a usable `git` is on PATH (probed once per process via a cheap call). */\r\nfunction gitAvailable(): boolean {\r\n  try {\r\n    execFileSync(\"git\", [\"--version\"], { stdio: \"ignore\" });\r\n    return true;\r\n  } catch {\r\n    return false;\r\n  }\r\n}\r\n\r\n/**\r\n * The default fetcher: `git clone --depth 1 [--branch <ref>] <url> <dest>`.\r\n * Re-fetch replaces the cache dir so the clone reflects the requested ref. The\r\n * caller may override the clone URL via `urlFor` (tests pass a `file://` repo).\r\n */\r\nexport function makeGitFetcher(urlFor: (r: RemoteSource) => string = cloneUrl): Fetcher {\n  return (remote, dest) => {\n    if (remote.sourceKind === \"npm\" || remote.sourceKind === \"archive\") {\n      throw new Error(`${describeRemote(remote)} is not a git clone source`);\n    }\n    if (!gitAvailable()) {\n      throw new Error(\r\n        \"git is required to fetch a remote connector source but was not found on PATH. \" +\r\n          \"Install git, or pass a local --connector <path>.\",\r\n      );\r\n    }\r\n    rmSync(dest, { recursive: true, force: true });\r\n    mkdirSync(dest, { recursive: true });\r\n    const args = [\"clone\", \"--depth\", \"1\"];\r\n    if (remote.ref) args.push(\"--branch\", remote.ref);\r\n    args.push(urlFor(remote), dest);\r\n    try {\r\n      execFileSync(\"git\", args, { stdio: \"ignore\" });\r\n    } catch (err) {\r\n      throw new Error(\r\n        `failed to clone ${urlFor(remote)}${remote.ref ? ` (ref ${remote.ref})` : \"\"}: ` +\r\n          `${err instanceof Error ? err.message : String(err)}`,\r\n      );\r\n    }\r\n  };\r\n}\r\n\r\n/**\r\n * Tarball fallback: download the GitHub codeload `tar.gz` and extract it with\r\n * the system `tar` (present on Linux, macOS, and Windows 10+). codeload nests\r\n * everything under a single `<repo>-<ref>/` top dir, which we flatten into\r\n * `dest`. Used only when `git` is unavailable.\r\n */\r\nasync function tarballFetch(remote: RemoteSource, dest: string): Promise<void> {\n  const url = tarballUrl(remote);\n  const res = await fetch(url);\n  if (!res.ok) {\n    throw new Error(`failed to download ${url}: HTTP ${res.status} ${res.statusText}`);\n  }\n  await extractTarballBuffer(Buffer.from(await res.arrayBuffer()), dest);\n}\n\nfunction extractTarballBuffer(buf: Buffer, dest: string): void {\n  const work = join(tmpdir(), `ac-src-${process.pid}-${Date.now()}`);\n  mkdirSync(work, { recursive: true });\n  const tarPath = join(work, \"source.tar.gz\");\r\n  writeFileSync(tarPath, buf);\r\n  try {\r\n    execFileSync(\"tar\", [\"-xzf\", tarPath, \"-C\", work], { stdio: \"ignore\" });\r\n  } catch (err) {\r\n    rmSync(work, { recursive: true, force: true });\r\n    throw new Error(\r\n      \"neither git nor a usable `tar` is available to fetch a remote connector \" +\r\n        `source (${err instanceof Error ? err.message : String(err)}). Install git ` +\r\n        \"or tar, or pass a local --connector <path>.\",\r\n    );\r\n  }\r\n  // codeload nests under a single `<repo>-<ref>/` directory — flatten it.\r\n  const entries = readdirSync(work).filter((e) => e !== \"source.tar.gz\");\r\n  const top = entries.length === 1 ? join(work, entries[0]!) : work;\r\n  rmSync(dest, { recursive: true, force: true });\r\n  renameSync(top, dest);\n  rmSync(work, { recursive: true, force: true });\n}\n\nasync function archiveFetch(remote: RemoteSource, dest: string): Promise<void> {\n  const source = remote.archiveUrl;\n  if (!source) throw new Error(\"archive source is missing archiveUrl\");\n\n  if (/^https?:\\/\\//i.test(source)) {\n    const res = await fetch(source);\n    if (!res.ok) {\n      throw new Error(`failed to download ${source}: HTTP ${res.status} ${res.statusText}`);\n    }\n    await extractTarballBuffer(Buffer.from(await res.arrayBuffer()), dest);\n    return;\n  }\n\n  const archivePath = source.startsWith(\"file://\") ? fileURLToPath(source) : source;\n  if (!existsSync(archivePath)) {\n    throw new Error(`archive source not found: ${source}`);\n  }\n  extractTarballBuffer(readFileSync(archivePath), dest);\n}\n\nfunction npmAvailable(): boolean {\n  try {\n    execFileSync(\"npm\", [\"--version\"], { stdio: \"ignore\" });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function npmFetch(remote: RemoteSource, dest: string): Promise<void> {\n  const spec = remote.packageSpec;\n  if (!spec) throw new Error(\"npm source is missing packageSpec\");\n  if (!npmAvailable()) {\n    throw new Error(\n      `npm is required to fetch npm:${spec} but was not found on PATH. ` +\n        \"Install npm, or pass a local --connector <path>.\",\n    );\n  }\n\n  const work = join(tmpdir(), `ac-npm-${process.pid}-${Date.now()}`);\n  mkdirSync(work, { recursive: true });\n  let stdout: string;\n  try {\n    stdout = execFileSync(\n      \"npm\",\n      [\"pack\", spec, \"--pack-destination\", work, \"--silent\"],\n      { encoding: \"utf8\" },\n    );\n  } catch (err) {\n    rmSync(work, { recursive: true, force: true });\n    throw new Error(\n      `failed to fetch npm:${spec}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n  }\n  const packed = stdout.trim().split(/\\r?\\n/).filter(Boolean).pop();\n  if (!packed) {\n    rmSync(work, { recursive: true, force: true });\n    throw new Error(`failed to fetch npm:${spec}: npm pack produced no tarball`);\n  }\n  const tarPath = isAbsolute(packed) ? packed : join(work, packed);\n  try {\n    extractTarballBuffer(readFileSync(tarPath), dest);\n  } finally {\n    rmSync(work, { recursive: true, force: true });\n  }\n}\n\r\n/**\r\n * The default network fetcher: `git clone` when git is on PATH, otherwise the\r\n * codeload tarball fallback (github.com sources only — a raw clone URL can only\r\n * be `git clone`d, so it requires git). A clear error is thrown when neither\r\n * applicable path works.\r\n */\r\nexport const gitFetcher: Fetcher = async (remote, dest) => {\n  if (remote.sourceKind === \"npm\") {\n    await npmFetch(remote, dest);\n    return;\n  }\n  if (remote.sourceKind === \"archive\") {\n    await archiveFetch(remote, dest);\n    return;\n  }\n  if (gitAvailable()) {\n    makeGitFetcher()(remote, dest);\r\n    return;\r\n  }\r\n  if (remote.cloneUrl) {\r\n    throw new Error(\r\n      `git is required to fetch ${remote.cloneUrl} but was not found on PATH. ` +\r\n        \"Install git, or pass a local --connector <path>.\",\r\n    );\r\n  }\r\n  await tarballFetch(remote, dest);\r\n};\r\n\r\n/** The resolved output of {@link resolveRemoteSource}. */\r\nexport interface ResolvedSource {\r\n  /** Absolute path to the agent-connector.config.* found inside the fetch. */\r\n  configPath: string;\r\n  /** The directory the source was fetched into (stable, under the data-root). */\r\n  sourceDir: string;\r\n  /** The (sub)directory the config was found in. */\r\n  connectorDir: string;\r\n  /** The live connector + its absolute module path (ready for the install flow). */\r\n  connector: ResolvedConnector;\r\n  modulePath: string;\r\n}\r\n\r\n/** Options for {@link resolveRemoteSource}. */\r\nexport interface ResolveOptions {\r\n  /** Override the fetch (tests). Defaults to {@link gitFetcher}. */\r\n  fetcher?: Fetcher;\r\n}\r\n\r\n/**\r\n * Fetch a remote source into its stable cache dir, honor the subpath, and GATE\r\n * it as a real agent-connector package: `findConnectorConfig` must locate an\r\n * `agent-connector.config.{mjs,js,json}` that `loadConnectorFromPath` can load.\r\n * Throws a clear, specific error when the target is not an agent-connector\r\n * connector. Returns everything the install flow needs.\r\n */\r\nexport async function resolveRemoteSource(\r\n  remote: RemoteSource,\r\n  opts: ResolveOptions = {},\r\n): Promise<ResolvedSource> {\r\n  const fetcher = opts.fetcher ?? gitFetcher;\r\n  const sourceDir = sourceCacheDir(remote);\r\n  mkdirSync(sourcesDir(), { recursive: true });\r\n  await fetcher(remote, sourceDir);\r\n\r\n  const label = describeRemote(remote);\r\n  if (!existsSync(sourceDir)) {\r\n    throw new Error(`failed to fetch ${label}: nothing was written to ${sourceDir}`);\r\n  }\r\n\r\n  // Honor the subpath; guard against a `..` escape out of the fetched dir.\r\n  // Containment is checked with path.relative (NOT a bare string prefix, which\r\n  // a sibling dir sharing the cache-key prefix would defeat) — mirroring the\r\n  // connectorDir() guard in paths.ts: reject when the relative path is empty,\r\n  // starts with \"..\", or is absolute.\r\n  const root = resolve(sourceDir);\r\n  const searchDir = remote.subpath ? resolve(root, remote.subpath) : root;\r\n  if (remote.subpath) {\r\n    const rel = relative(root, searchDir);\r\n    if (rel === \"\" || rel.startsWith(\"..\") || isAbsolute(rel)) {\r\n      throw new Error(`subpath escapes the fetched source: ${remote.subpath}`);\r\n    }\r\n  }\r\n  if (!existsSync(searchDir)) {\r\n    throw new Error(\r\n      `${label}: subpath \"${remote.subpath}\" does not exist in the repository.`,\r\n    );\r\n  }\r\n\r\n  // ── PACKAGE GATE ──────────────────────────────────────────────────────────\r\n  // Search only WITHIN the fetched (sub)dir. findConnectorConfig walks UPWARD to\r\n  // the filesystem root, so confine the start dir and verify the hit is inside.\r\n  const configPath = findConfigWithin(searchDir);\r\n  if (!configPath) {\r\n    throw new Error(\r\n      `${label} is not an agent-connector connector — no ` +\r\n        `agent-connector.config.{mjs,js,json} found in the repo` +\r\n        (remote.subpath ? ` at subpath \"${remote.subpath}\"` : \"\") +\r\n        \". The target must be a package built with agent-connector (defineConnector).\",\r\n    );\r\n  }\r\n\r\n  let connector: ResolvedConnector;\r\n  let modulePath: string;\r\n  try {\r\n    ({ connector, modulePath } = await loadConnectorFromPath(configPath));\r\n  } catch (err) {\r\n    throw new Error(\r\n      `${label}: found ${configPath} but it failed to load as an agent-connector ` +\r\n        `connector (${err instanceof Error ? err.message : String(err)}). The target ` +\r\n        \"must be a package built with agent-connector (defineConnector).\",\r\n    );\r\n  }\r\n\r\n  return {\r\n    configPath,\r\n    sourceDir,\r\n    connectorDir: searchDir,\r\n    connector,\r\n    modulePath,\r\n  };\r\n}\r\n\r\n/**\r\n * Locate `agent-connector.config.*` strictly within `dir` (not its ancestors).\r\n * `findConnectorConfig` walks upward, so we scope the result by asserting the\r\n * hit is in `dir` itself.\r\n */\r\nfunction findConfigWithin(dir: string): string | null {\r\n  const hit = findConnectorConfig(dir);\r\n  if (!hit) return null;\r\n  // Must live directly in the (sub)dir we were pointed at — reject an ancestor\r\n  // hit so a parent dir's config can't masquerade as the repo's.\r\n  const dirAbs = resolve(dir);\r\n  const hitDir = resolve(hit, \"..\");\r\n  return hitDir === dirAbs ? hit : null;\r\n}\r\n\r\n/** A human label for a remote source used in error messages. */\r\nexport function describeRemote(r: RemoteSource): string {\n  if (r.sourceKind === \"npm\") return `npm:${r.packageSpec ?? r.repo}`;\n  if (r.sourceKind === \"archive\") return `archive:${r.archiveUrl ?? r.repo}`;\n  let s = r.cloneUrl ?? `${r.owner}/${r.repo}`;\n  if (r.subpath) s += `/${r.subpath}`;\n  if (r.ref) s += `#${r.ref}`;\r\n  return s;\r\n}\r\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,SAAS,iBAAiB;;;ACI1B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,cAAc;AACvB,SAAS,UAAU,YAAY,MAAM,UAAU,eAAe;AAC9D,SAAS,qBAAqB;AAwC9B,IAAM,aAAa;AACnB,IAAM,uBAAuB;AAC7B,IAAM,eAAe;AAErB,SAAS,oBAAoB,SAA0B;AACrD,SAAO,WAAW,KAAK,OAAO,KAAK,YAAY,OAAO,YAAY;AACpE;AAEA,SAAS,cAAc,SAAsC;AAC3D,MAAI,YAAY,UAAa,YAAY,GAAI,QAAO;AACpD,SAAO,QACJ,MAAM,GAAG,EACT,MAAM,CAAC,YAAY,YAAY,MAAM,YAAY,OAAO,YAAY,IAAI;AAC7E;AAQO,SAAS,WAAW,OAAwB;AACjD,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,WAAW,KAAK,EAAG,QAAO;AAC9B,MACE,MAAM,WAAW,IAAI,KACrB,MAAM,WAAW,KAAK,KACtB,UAAU,OACV,UAAU,QACV,MAAM,WAAW,GAAG,KACpB,MAAM,WAAW,GAAG,KACpB,MAAM,WAAW,SAAS,GAC1B;AACA,WAAO;AAAA,EACT;AAEA,MAAI,kBAAkB,KAAK,KAAK,KAAK,MAAM,WAAW,MAAM,EAAG,QAAO;AACtE,SAAO;AACT;AAQO,SAAS,kBAAkB,OAAoC;AACpE,QAAM,MAAM,MAAM,KAAK;AACvB,MAAI,QAAQ,GAAI,QAAO;AAGvB,QAAM,MAAM,IAAI,MAAM,4CAA4C;AAClE,MAAI,KAAK;AACP,WAAO,iBAAiB,IAAI,CAAC,GAAI,IAAI,CAAC,GAAI,MAAS;AAAA,EACrD;AAGA,MAAI,gBAAgB,KAAK,GAAG,KAAK,IAAI,WAAW,QAAQ,GAAG;AACzD,QAAI;AACJ,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,QAAQ,aAAa,UAAU,CAAC;AAAA,IACpD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,QAAI,CAAC,sBAAsB,KAAK,IAAI,QAAQ,EAAG,QAAO;AACtD,UAAMA,QAAO,IAAI,SAAS,QAAQ,QAAQ,EAAE,EAAE,MAAM,GAAG,EAAE,OAAO,OAAO;AACvE,QAAIA,MAAK,SAAS,EAAG,QAAO;AAC5B,UAAMC,SAAQD,MAAK,CAAC;AACpB,QAAIE,QAAOF,MAAK,CAAC,EAAG,QAAQ,UAAU,EAAE;AACxC,QAAI;AACJ,QAAIG;AAEJ,QAAIH,MAAK,CAAC,MAAM,UAAUA,MAAK,CAAC,MAAM,QAAQ;AAC5C,YAAMA,MAAK,CAAC;AACZ,UAAIA,MAAK,SAAS,EAAG,CAAAG,WAAUH,MAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AAAA,IACvD,WAAWA,MAAK,SAAS,GAAG;AAC1B,MAAAG,WAAUH,MAAK,MAAM,CAAC,EAAE,KAAK,GAAG;AAAA,IAClC;AACA,UAAM,OAAO,IAAI,KAAK,QAAQ,MAAM,EAAE;AACtC,QAAI,KAAM,OAAM;AAChB,QAAI,CAAC,oBAAoBC,MAAK,KAAK,CAAC,oBAAoBC,KAAI,EAAG,QAAO;AACtE,WAAO,YAAY,EAAE,OAAAD,QAAO,MAAAC,OAAM,KAAK,SAAAC,SAAQ,CAAC;AAAA,EAClD;AAGA,QAAM,YAAY,IAAI,WAAW,SAAS,IAAI,IAAI,MAAM,UAAU,MAAM,IAAI;AAK5E,QAAM,CAAC,UAAU,OAAO,IAAI,UAAU,SAAS;AAC/C,QAAM,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAC/C,MAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,QAAM,QAAQ,KAAK,CAAC;AACpB,QAAM,OAAO,KAAK,CAAC,EAAG,QAAQ,UAAU,EAAE;AAC1C,QAAM,UAAU,KAAK,SAAS,IAAI,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI;AAC5D,MAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,IAAI,EAAG,QAAO;AACtE,SAAO,YAAY,EAAE,OAAO,MAAM,KAAK,SAAS,QAAQ,CAAC;AAC3D;AAGA,SAAS,UAAU,OAA6C;AAC9D,QAAM,IAAI,MAAM,QAAQ,GAAG;AAC3B,MAAI,MAAM,GAAI,QAAO,CAAC,OAAO,MAAS;AACtC,QAAM,MAAM,MAAM,MAAM,IAAI,CAAC,EAAE,KAAK;AACpC,SAAO,CAAC,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,KAAK,SAAY,GAAG;AACzD;AAGA,SAAS,iBAAiB,OAAe,aAAqB,MAAsC;AAClG,QAAM,CAAC,UAAU,GAAG,IAAI,UAAU,WAAW;AAC7C,QAAM,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAC/C,QAAM,QAAQ,KAAK,CAAC,KAAK,IAAI,QAAQ,UAAU,EAAE;AACjD,QAAM,UAAU,KAAK,SAAS,IAAI,KAAK,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI;AAC5D,MAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,oBAAoB,IAAI,EAAG,QAAO;AACtE,SAAO,YAAY,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC;AAClD;AAQA,IAAM,SAAS;AAGR,SAAS,UAAU,KAAsB;AAC9C,SAAO,OAAO,KAAK,GAAG;AACxB;AAOA,SAAS,YAAY,GAAsC;AACzD,MAAI,EAAE,QAAQ,UAAa,CAAC,UAAU,EAAE,GAAG,EAAG,QAAO;AACrD,MAAI,CAAC,cAAc,EAAE,OAAO,EAAG,QAAO;AACtC,QAAM,MAAoB,EAAE,OAAO,EAAE,OAAO,MAAM,EAAE,KAAK;AACzD,MAAI,EAAE,IAAK,KAAI,MAAM,EAAE;AACvB,MAAI,EAAE,WAAW,EAAE,YAAY,GAAI,KAAI,UAAU,EAAE;AACnD,SAAO;AACT;AASO,SAAS,YAAY,OAAoC;AAC9D,QAAM,CAAC,SAAS,GAAG,IAAI,UAAU,MAAM,KAAK,CAAC;AAC7C,QAAM,WACJ,QAAQ,WAAW,SAAS,KAC5B,QAAQ,WAAW,QAAQ,KAC3B,QAAQ,WAAW,QAAQ,KAC3B,gBAAgB,KAAK,OAAO;AAC9B,QAAM,QAAQ,sBAAsB,KAAK,OAAO,KAAK,CAAC,QAAQ,WAAW,iBAAiB;AAC1F,MAAI,CAAC,YAAY,CAAC,MAAO,QAAO;AAEhC,MAAI,QAAQ,UAAa,CAAC,UAAU,GAAG,EAAG,QAAO;AAGjD,QAAM,WAAW,QAAQ,QAAQ,UAAU,EAAE,EAAE,QAAQ,QAAQ,EAAE;AACjE,QAAM,OAAO,SAAS,MAAM,MAAM,EAAE,OAAO,OAAO;AAClD,QAAM,OAAO,KAAK,KAAK,SAAS,CAAC,KAAK;AACtC,QAAM,QAAQ,KAAK,KAAK,SAAS,CAAC,KAAK;AACvC,QAAM,MAAoB,EAAE,OAAO,MAAM,UAAU,QAAQ;AAC3D,MAAI,IAAK,KAAI,MAAM;AACnB,SAAO;AACT;AAGO,SAAS,eAAe,OAAoC;AACjE,QAAM,MAAM,MAAM,KAAK;AACvB,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,OAAO,IAAI,MAAM,OAAO,MAAM,EAAE,KAAK;AAC3C,MAAI,SAAS,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW,GAAG,EAAG,QAAO;AAEnE,MAAI;AACJ,MAAI,KAAK,WAAW,GAAG,GAAG;AACxB,UAAM,QAAQ,KAAK,MAAM,wCAAwC;AACjE,QAAI,CAAC,MAAO,QAAO;AACnB,kBAAc,MAAM,CAAC;AAAA,EACvB,OAAO;AACL,UAAM,QAAQ,KAAK,MAAM,6BAA6B;AACtD,QAAI,CAAC,MAAO,QAAO;AACnB,kBAAc,MAAM,CAAC;AAAA,EACvB;AAEA,QAAM,QAAQ,YAAY,WAAW,GAAG,IAAI,YAAY,MAAM,GAAG,IAAI,CAAC,WAAW;AACjF,MAAI,MAAM,WAAW,GAAG;AACtB,QAAI,CAAC,aAAa,KAAK,MAAM,CAAC,CAAE,KAAK,CAAC,qBAAqB,KAAK,MAAM,CAAC,CAAE,GAAG;AAC1E,aAAO;AAAA,IACT;AAAA,EACF,WAAW,MAAM,WAAW,GAAG;AAC7B,QAAI,CAAC,qBAAqB,KAAK,MAAM,CAAC,CAAE,EAAG,QAAO;AAAA,EACpD,OAAO;AACL,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,MAAM,YAAY,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,IAAI;AAAA,IACvD;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,SAAS,kBAAkB,OAAuB;AAChD,SAAO,MAAM,MAAM,QAAQ,CAAC,EAAE,CAAC,KAAK;AACtC;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,cAAc,OAAwB;AAC7C,QAAM,IAAI,kBAAkB,gBAAgB,KAAK,CAAC,EAAE,YAAY;AAChE,SAAO,EAAE,SAAS,MAAM,KAAK,EAAE,SAAS,SAAS;AACnD;AAGO,SAAS,mBAAmB,OAAoC;AACrE,QAAM,MAAM,MAAM,KAAK;AACvB,QAAM,WAAW,IAAI,WAAW,UAAU;AAC1C,QAAM,SAAS,WAAW,IAAI,MAAM,WAAW,MAAM,EAAE,KAAK,IAAI;AAChE,MAAI,WAAW,GAAI,QAAO;AAC1B,MAAI,CAAC,YAAY,CAAC,cAAc,MAAM,EAAG,QAAO;AAEhD,QAAM,UAAU,kBAAkB,gBAAgB,MAAM,CAAC;AACzD,QAAM,OAAO,SAAS,OAAO,EAAE,QAAQ,eAAe,EAAE,EAAE,QAAQ,WAAW,EAAE;AAC/E,QAAM,OAAO,QAAQ;AACrB,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,OAAO;AAAA,IACP;AAAA,IACA,YAAY;AAAA,EACd;AACF;AAQO,SAAS,eAAe,OAAkC;AAC/D,QAAM,MAAM,eAAe,KAAK;AAChC,MAAI,IAAK,QAAO,EAAE,MAAM,UAAU,QAAQ,IAAI;AAC9C,QAAM,UAAU,mBAAmB,KAAK;AACxC,MAAI,QAAS,QAAO,EAAE,MAAM,UAAU,QAAQ,QAAQ;AAGtD,QAAM,SAAS,YAAY,KAAK;AAChC,MAAI,OAAQ,QAAO,EAAE,MAAM,UAAU,QAAQ,OAAO;AACpD,MAAI,WAAW,KAAK,EAAG,QAAO,EAAE,MAAM,SAAS,MAAM;AACrD,QAAM,SAAS,kBAAkB,KAAK;AACtC,SAAO,SAAS,EAAE,MAAM,UAAU,OAAO,IAAI;AAC/C;AAGO,SAAS,SAAS,GAAyB;AAChD,MAAI,EAAE,eAAe,SAAS,EAAE,eAAe,WAAW;AACxD,UAAM,IAAI,MAAM,GAAG,eAAe,CAAC,CAAC,4BAA4B;AAAA,EAClE;AACA,SAAO,EAAE,YAAY,sBAAsB,EAAE,KAAK,IAAI,EAAE,IAAI;AAC9D;AAGO,SAAS,WAAW,GAAyB;AAClD,QAAM,MAAM,EAAE,OAAO;AACrB,SAAO,+BAA+B,EAAE,KAAK,IAAI,EAAE,IAAI,WAAW,GAAG;AACvE;AAGO,SAAS,eAAe,GAAyB;AACtD,QAAM,OAAO,CAAC,MAAc,EAAE,QAAQ,oBAAoB,GAAG;AAC7D,MAAI,EAAE,eAAe,OAAO;AAC1B,WAAO,KAAK,WAAW,GAAG,QAAQ,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;AAAA,EAC1G;AACA,MAAI,EAAE,eAAe,WAAW;AAC9B,WAAO,KAAK,WAAW,GAAG,YAAY,KAAK,EAAE,IAAI,CAAC,KAAK,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;AAAA,EAC5F;AAGA,QAAM,OAAO,EAAE,WACX,GAAG,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,UAAU,EAAE,QAAQ,CAAC,KAC3D,GAAG,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC;AACrC,QAAM,OAAO,EAAE,MAAM,GAAG,IAAI,KAAK,KAAK,EAAE,GAAG,CAAC,KAAK;AACjD,SAAO,KAAK,WAAW,GAAG,IAAI;AAChC;AAGA,SAAS,UAAU,OAAuB;AACxC,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC;AACpE;AAUA,SAAS,eAAwB;AAC/B,MAAI;AACF,iBAAa,OAAO,CAAC,WAAW,GAAG,EAAE,OAAO,SAAS,CAAC;AACtD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOO,SAAS,eAAe,SAAsC,UAAmB;AACtF,SAAO,CAAC,QAAQ,SAAS;AACvB,QAAI,OAAO,eAAe,SAAS,OAAO,eAAe,WAAW;AAClE,YAAM,IAAI,MAAM,GAAG,eAAe,MAAM,CAAC,4BAA4B;AAAA,IACvE;AACA,QAAI,CAAC,aAAa,GAAG;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,cAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AACnC,UAAM,OAAO,CAAC,SAAS,WAAW,GAAG;AACrC,QAAI,OAAO,IAAK,MAAK,KAAK,YAAY,OAAO,GAAG;AAChD,SAAK,KAAK,OAAO,MAAM,GAAG,IAAI;AAC9B,QAAI;AACF,mBAAa,OAAO,MAAM,EAAE,OAAO,SAAS,CAAC;AAAA,IAC/C,SAAS,KAAK;AACZ,YAAM,IAAI;AAAA,QACR,mBAAmB,OAAO,MAAM,CAAC,GAAG,OAAO,MAAM,SAAS,OAAO,GAAG,MAAM,EAAE,KACvE,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AACF;AAQA,eAAe,aAAa,QAAsB,MAA6B;AAC7E,QAAM,MAAM,WAAW,MAAM;AAC7B,QAAM,MAAM,MAAM,MAAM,GAAG;AAC3B,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sBAAsB,GAAG,UAAU,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,EACnF;AACA,QAAM,qBAAqB,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI;AACvE;AAEA,SAAS,qBAAqB,KAAa,MAAoB;AAC7D,QAAM,OAAO,KAAK,OAAO,GAAG,UAAU,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,EAAE;AACjE,YAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AACnC,QAAM,UAAU,KAAK,MAAM,eAAe;AAC1C,gBAAc,SAAS,GAAG;AAC1B,MAAI;AACF,iBAAa,OAAO,CAAC,QAAQ,SAAS,MAAM,IAAI,GAAG,EAAE,OAAO,SAAS,CAAC;AAAA,EACxE,SAAS,KAAK;AACZ,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,UAAM,IAAI;AAAA,MACR,qFACa,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAE/D;AAAA,EACF;AAEA,QAAM,UAAU,YAAY,IAAI,EAAE,OAAO,CAAC,MAAM,MAAM,eAAe;AACrE,QAAM,MAAM,QAAQ,WAAW,IAAI,KAAK,MAAM,QAAQ,CAAC,CAAE,IAAI;AAC7D,SAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,aAAW,KAAK,IAAI;AACpB,SAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC/C;AAEA,eAAe,aAAa,QAAsB,MAA6B;AAC7E,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sCAAsC;AAEnE,MAAI,gBAAgB,KAAK,MAAM,GAAG;AAChC,UAAM,MAAM,MAAM,MAAM,MAAM;AAC9B,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,sBAAsB,MAAM,UAAU,IAAI,MAAM,IAAI,IAAI,UAAU,EAAE;AAAA,IACtF;AACA,UAAM,qBAAqB,OAAO,KAAK,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI;AACrE;AAAA,EACF;AAEA,QAAM,cAAc,OAAO,WAAW,SAAS,IAAI,cAAc,MAAM,IAAI;AAC3E,MAAI,CAAC,WAAW,WAAW,GAAG;AAC5B,UAAM,IAAI,MAAM,6BAA6B,MAAM,EAAE;AAAA,EACvD;AACA,uBAAqB,aAAa,WAAW,GAAG,IAAI;AACtD;AAEA,SAAS,eAAwB;AAC/B,MAAI;AACF,iBAAa,OAAO,CAAC,WAAW,GAAG,EAAE,OAAO,SAAS,CAAC;AACtD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,SAAS,QAAsB,MAA6B;AACzE,QAAM,OAAO,OAAO;AACpB,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,mCAAmC;AAC9D,MAAI,CAAC,aAAa,GAAG;AACnB,UAAM,IAAI;AAAA,MACR,gCAAgC,IAAI;AAAA,IAEtC;AAAA,EACF;AAEA,QAAM,OAAO,KAAK,OAAO,GAAG,UAAU,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,EAAE;AACjE,YAAU,MAAM,EAAE,WAAW,KAAK,CAAC;AACnC,MAAI;AACJ,MAAI;AACF,aAAS;AAAA,MACP;AAAA,MACA,CAAC,QAAQ,MAAM,sBAAsB,MAAM,UAAU;AAAA,MACrD,EAAE,UAAU,OAAO;AAAA,IACrB;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,UAAM,IAAI;AAAA,MACR,uBAAuB,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAClF;AAAA,EACF;AACA,QAAM,SAAS,OAAO,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,OAAO,EAAE,IAAI;AAChE,MAAI,CAAC,QAAQ;AACX,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC7C,UAAM,IAAI,MAAM,uBAAuB,IAAI,gCAAgC;AAAA,EAC7E;AACA,QAAM,UAAU,WAAW,MAAM,IAAI,SAAS,KAAK,MAAM,MAAM;AAC/D,MAAI;AACF,yBAAqB,aAAa,OAAO,GAAG,IAAI;AAAA,EAClD,UAAE;AACA,WAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/C;AACF;AAQO,IAAM,aAAsB,OAAO,QAAQ,SAAS;AACzD,MAAI,OAAO,eAAe,OAAO;AAC/B,UAAM,SAAS,QAAQ,IAAI;AAC3B;AAAA,EACF;AACA,MAAI,OAAO,eAAe,WAAW;AACnC,UAAM,aAAa,QAAQ,IAAI;AAC/B;AAAA,EACF;AACA,MAAI,aAAa,GAAG;AAClB,mBAAe,EAAE,QAAQ,IAAI;AAC7B;AAAA,EACF;AACA,MAAI,OAAO,UAAU;AACnB,UAAM,IAAI;AAAA,MACR,4BAA4B,OAAO,QAAQ;AAAA,IAE7C;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,IAAI;AACjC;AA4BA,eAAsB,oBACpB,QACA,OAAuB,CAAC,GACC;AACzB,QAAM,UAAU,KAAK,WAAW;AAChC,QAAM,YAAY,eAAe,MAAM;AACvC,YAAU,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3C,QAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAM,QAAQ,eAAe,MAAM;AACnC,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,UAAM,IAAI,MAAM,mBAAmB,KAAK,4BAA4B,SAAS,EAAE;AAAA,EACjF;AAOA,QAAM,OAAO,QAAQ,SAAS;AAC9B,QAAM,YAAY,OAAO,UAAU,QAAQ,MAAM,OAAO,OAAO,IAAI;AACnE,MAAI,OAAO,SAAS;AAClB,UAAM,MAAM,SAAS,MAAM,SAAS;AACpC,QAAI,QAAQ,MAAM,IAAI,WAAW,IAAI,KAAK,WAAW,GAAG,GAAG;AACzD,YAAM,IAAI,MAAM,uCAAuC,OAAO,OAAO,EAAE;AAAA,IACzE;AAAA,EACF;AACA,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,cAAc,OAAO,OAAO;AAAA,IACtC;AAAA,EACF;AAKA,QAAM,aAAa,iBAAiB,SAAS;AAC7C,MAAI,CAAC,YAAY;AACf,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,2GAEL,OAAO,UAAU,gBAAgB,OAAO,OAAO,MAAM,MACtD;AAAA,IACJ;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,KAAC,EAAE,WAAW,WAAW,IAAI,MAAM,sBAAsB,UAAU;AAAA,EACrE,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,WAAW,UAAU,2DACb,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAElE;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF;AACF;AAOA,SAAS,iBAAiB,KAA4B;AACpD,QAAM,MAAM,oBAAoB,GAAG;AACnC,MAAI,CAAC,IAAK,QAAO;AAGjB,QAAM,SAAS,QAAQ,GAAG;AAC1B,QAAM,SAAS,QAAQ,KAAK,IAAI;AAChC,SAAO,WAAW,SAAS,MAAM;AACnC;AAGO,SAAS,eAAe,GAAyB;AACtD,MAAI,EAAE,eAAe,MAAO,QAAO,OAAO,EAAE,eAAe,EAAE,IAAI;AACjE,MAAI,EAAE,eAAe,UAAW,QAAO,WAAW,EAAE,cAAc,EAAE,IAAI;AACxE,MAAI,IAAI,EAAE,YAAY,GAAG,EAAE,KAAK,IAAI,EAAE,IAAI;AAC1C,MAAI,EAAE,QAAS,MAAK,IAAI,EAAE,OAAO;AACjC,MAAI,EAAE,IAAK,MAAK,IAAI,EAAE,GAAG;AACzB,SAAO;AACT;;;ADroBA,eAAsB,IAAI,MAAiC;AACzD,QAAM,EAAE,QAAQ,YAAY,IAAI,UAAU;AAAA,IACxC,MAAM;AAAA,IACN,SAAS;AAAA,MACP,QAAQ,EAAE,MAAM,UAAU,SAAS,SAAS;AAAA,MAC5C,OAAO,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,MACzC,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,WAAW,EAAE,MAAM,SAAS;AAAA,MAC5B,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,WAAW,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA;AAAA;AAAA,MAG7C,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA;AAAA,MAEzC,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,IAC3C;AAAA;AAAA;AAAA,IAGA,kBAAkB;AAAA,EACpB,CAAC;AAED,mBAAiB,EAAE,OAAO,OAAO,MAAM,CAAC;AAExC,QAAM,SAAS,mBAAmB,OAAO,MAAM;AAC/C,MAAI,UAAU,MAAM;AAClB,WAAO,KAAK,qBAAqB,OAAO,MAAM,4BAA4B;AAAA,EAC5E;AAEA,QAAM,aAAa,OAAO,WAAW,QAAQ,IAAI;AAMjD,QAAM,mBAAmB,YAAY,CAAC;AACtC,MAAI,oBAAoB,QAAQ,OAAO,aAAa,MAAM;AACxD,WAAO,KAAK,qFAAqF;AAAA,EACnG;AACA,QAAM,SAAS,oBAAoB,OAAO;AAE1C,QAAM,QAAQ,WAAW,OAAO,KAAK;AACrC,MAAI,SAAS,KAAM,QAAO,KAAK,oBAAoB,OAAO,KAAK,sBAAsB;AACrF,MAAI,WAAW,iBAAiB,UAAU,QAAQ;AAChD,WAAO;AAAA,MACL;AAAA,IACF;AAAA,EACF;AAMA,MAAI;AACJ,MAAI;AACJ,QAAM,OAAO,UAAU,OAAO,eAAe,MAAM,IAAI;AACvD,MAAI,UAAU,QAAQ,QAAQ,MAAM;AAClC,WAAO;AAAA,MACL,IAAI,MAAM;AAAA,IAEZ;AAAA,EACF;AACA,MAAI,QAAQ,QAAQ,KAAK,SAAS,UAAU;AAC1C,QAAI;AACF,YAAM,WAAW,MAAM,oBAAoB,KAAK,MAAM;AACtD,OAAC,EAAE,WAAW,WAAW,IAAI;AAAA,IAC/B,SAAS,KAAK;AACZ,aAAO,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9D;AAAA,EACF,OAAO;AACL,UAAM,aAAa,UAAU,oBAAoB,UAAU;AAC3D,QAAI,CAAC,YAAY;AACf,aAAO;AAAA,QACL;AAAA,MAEF;AAAA,IACF;AACA,KAAC,EAAE,WAAW,WAAW,IAAI,MAAM,sBAAsB,UAAU;AAAA,EACrE;AAEA,QAAM,UAAU,aAAa,OAAO,OAAO;AAE3C,QAAM,SACJ,WAAW,gBACP,MAAM,sBAAsB;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,SAAS;AAAA,IACxB,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC,IACD,MAAM,iBAAiB;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,OAAO,SAAS;AAAA,IACxB,OAAO,OAAO;AAAA,IACd,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AAEP,SAAO,YAAY,sBAAsB,SAAS;AAClD,QAAM,oBAAoB,QAAQ,SAAS,CAAC;AAC5C,SAAO,OAAO,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,MAAM,IAAI,IAAI;AAC/D;","names":["segs","owner","repo","subpath"]}

package/dist/{introspect-D4fEGuhN.d.ts → introspect-dNekqPDY.d.ts}

@@ -1,4 +1,4 @@
-import { n as PlatformCapabilities, o as PlatformId } from './types-BhcUEIJJ.js';
+import { n as PlatformCapabilities, o as PlatformId } from './types-JyhpJHJa.js';
 
 /**
  * sdk/introspect — host-capability introspection over the adapter registry.

package/dist/{jetbrains-copilot-ZGIWI6YV.js → jetbrains-copilot-Z4FC3RM3.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   normalizeSessionSource
-} from "./chunk-H53QZQJI.js";
+} from "./chunk-PSGTHJQU.js";
 import {
   BaseAdapter,
   renderSkillMd
-} from "./chunk-MGTDQLJJ.js";
+} from "./chunk-3FINQ2ZF.js";
 import {
   buildHomeBinHookCommand,
   isHomeBinHookCommand
-} from "./chunk-4NHXLXSD.js";
-import "./chunk-UMQ6NBQR.js";
-import "./chunk-GZGLCCEE.js";
+} from "./chunk-Y3K6KJMS.js";
+import "./chunk-ILWHLGIC.js";
+import "./chunk-QYOUQCC6.js";
 
 // src/adapters/jetbrains-copilot/index.ts
 import { existsSync } from "fs";
@@ -710,4 +710,4 @@ export {
   adapter,
   jetbrains_copilot_default as default
 };
-//# sourceMappingURL=jetbrains-copilot-ZGIWI6YV.js.map
+//# sourceMappingURL=jetbrains-copilot-Z4FC3RM3.js.map