@nimblebrain/mpak-sdk 0.1.1 → 0.1.2

package/dist/index.js

@@ -22,10 +22,7 @@ var MpakIntegrityError = class extends MpakError {
   expected;
   actual;
   constructor(expected, actual) {
-    super(
-      `Integrity mismatch: expected ${expected}, got ${actual}`,
-      "INTEGRITY_MISMATCH"
-    );
+    super(`Integrity mismatch: expected ${expected}, got ${actual}`, "INTEGRITY_MISMATCH");
     this.name = "MpakIntegrityError";
     this.expected = expected;
     this.actual = actual;
@@ -39,14 +36,16 @@ var MpakNetworkError = class extends MpakError {
 };
 
 // src/client.ts
-var DEFAULT_REGISTRY_URL = "https://api.mpak.dev";
+var DEFAULT_REGISTRY_URL = "https://registry.mpak.dev";
 var DEFAULT_TIMEOUT = 3e4;
 var MpakClient = class {
   registryUrl;
   timeout;
+  userAgent;
   constructor(config = {}) {
     this.registryUrl = config.registryUrl ?? DEFAULT_REGISTRY_URL;
     this.timeout = config.timeout ?? DEFAULT_TIMEOUT;
+    this.userAgent = config.userAgent;
   }
   // ===========================================================================
   // Bundle API
@@ -64,6 +63,9 @@ var MpakClient = class {
     const queryString = searchParams.toString();
     const url = `${this.registryUrl}/v1/bundles/search${queryString ? `?${queryString}` : ""}`;
     const response = await this.fetchWithTimeout(url);
+    if (response.status === 404) {
+      throw new MpakNotFoundError("bundles/search endpoint");
+    }
     if (!response.ok) {
       throw new MpakNetworkError(`Failed to search bundles: HTTP ${response.status}`);
     }
@@ -155,6 +157,9 @@ var MpakClient = class {
     const queryString = searchParams.toString();
     const url = `${this.registryUrl}/v1/skills/search${queryString ? `?${queryString}` : ""}`;
     const response = await this.fetchWithTimeout(url);
+    if (response.status === 404) {
+      throw new MpakNotFoundError("skills/search endpoint");
+    }
     if (!response.ok) {
       throw new MpakNetworkError(`Failed to search skills: HTTP ${response.status}`);
     }
@@ -314,9 +319,19 @@ var MpakClient = class {
     const content = await response.text();
     if (ref.integrity) {
       this.verifyIntegrityOrThrow(content, ref.integrity);
-      return { content, version: ref.version, source: "github", verified: true };
-    }
-    return { content, version: ref.version, source: "github", verified: false };
+      return {
+        content,
+        version: ref.version,
+        source: "github",
+        verified: true
+      };
+    }
+    return {
+      content,
+      version: ref.version,
+      source: "github",
+      verified: false
+    };
   }
   /**
    * Resolve a skill from a direct URL
@@ -431,15 +446,23 @@ var MpakClient = class {
     const timeoutId = setTimeout(() => {
       controller.abort();
     }, this.timeout);
+    const headers = {
+      ...init?.headers
+    };
+    if (this.userAgent) {
+      headers["User-Agent"] = this.userAgent;
+    }
     try {
-      return await fetch(url, { ...init, signal: controller.signal });
+      return await fetch(url, {
+        ...init,
+        headers,
+        signal: controller.signal
+      });
     } catch (error) {
       if (error instanceof Error && error.name === "AbortError") {
         throw new MpakNetworkError(`Request timeout after ${this.timeout}ms`);
       }
-      throw new MpakNetworkError(
-        error instanceof Error ? error.message : "Network error"
-      );
+      throw new MpakNetworkError(error instanceof Error ? error.message : "Network error");
     } finally {
       clearTimeout(timeoutId);
     }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/errors.ts"],"sourcesContent":["import { createHash } from 'crypto';\nimport type {\n  MpakClientConfig,\n  BundleSearchResponse,\n  BundleDetailResponse,\n  BundleVersionsResponse,\n  BundleVersionResponse,\n  BundleDownloadResponse,\n  BundleSearchParams,\n  SkillSearchResponse,\n  SkillDetailResponse,\n  SkillDownloadResponse,\n  SkillSearchParams,\n  Platform,\n  SkillReference,\n  GithubSkillReference,\n  UrlSkillReference,\n  ResolvedSkill,\n} from './types.js';\nimport {\n  MpakNotFoundError,\n  MpakIntegrityError,\n  MpakNetworkError,\n} from './errors.js';\n\nconst DEFAULT_REGISTRY_URL = 'https://api.mpak.dev';\nconst DEFAULT_TIMEOUT = 30000;\n\n/**\n * Client for interacting with the mpak registry\n *\n * Zero runtime dependencies - uses native fetch and crypto only.\n * Requires Node.js 18+ for native fetch support.\n */\nexport class MpakClient {\n  private readonly registryUrl: string;\n  private readonly timeout: number;\n\n  constructor(config: MpakClientConfig = {}) {\n    this.registryUrl = config.registryUrl ?? DEFAULT_REGISTRY_URL;\n    this.timeout = config.timeout ?? DEFAULT_TIMEOUT;\n  }\n\n  // ===========================================================================\n  // Bundle API\n  // ===========================================================================\n\n  /**\n   * Search for bundles\n   */\n  async searchBundles(params: BundleSearchParams = {}): Promise<BundleSearchResponse> {\n    const searchParams = new URLSearchParams();\n    if (params.q) searchParams.set('q', params.q);\n    if (params.type) searchParams.set('type', params.type);\n    if (params.sort) searchParams.set('sort', params.sort);\n    if (params.limit) searchParams.set('limit', String(params.limit));\n    if (params.offset) searchParams.set('offset', String(params.offset));\n\n    const queryString = searchParams.toString();\n    const url = `${this.registryUrl}/v1/bundles/search${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to search bundles: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleSearchResponse>;\n  }\n\n  /**\n   * Get bundle details\n   */\n  async getBundle(name: string): Promise<BundleDetailResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleDetailResponse>;\n  }\n\n  /**\n   * Get all versions of a bundle\n   */\n  async getBundleVersions(name: string): Promise<BundleVersionsResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle versions: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleVersionsResponse>;\n  }\n\n  /**\n   * Get a specific version of a bundle\n   */\n  async getBundleVersion(name: string, version: string): Promise<BundleVersionResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions/${version}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle version: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleVersionResponse>;\n  }\n\n  /**\n   * Get download info for a bundle\n   */\n  async getBundleDownload(\n    name: string,\n    version: string,\n    platform?: Platform\n  ): Promise<BundleDownloadResponse> {\n    this.validateScopedName(name);\n\n    const params = new URLSearchParams();\n    if (platform) {\n      params.set('os', platform.os);\n      params.set('arch', platform.arch);\n    }\n\n    const queryString = params.toString();\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions/${version}/download${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleDownloadResponse>;\n  }\n\n  // ===========================================================================\n  // Skill API\n  // ===========================================================================\n\n  /**\n   * Search for skills\n   */\n  async searchSkills(params: SkillSearchParams = {}): Promise<SkillSearchResponse> {\n    const searchParams = new URLSearchParams();\n    if (params.q) searchParams.set('q', params.q);\n    if (params.tags) searchParams.set('tags', params.tags);\n    if (params.category) searchParams.set('category', params.category);\n    if (params.surface) searchParams.set('surface', params.surface);\n    if (params.sort) searchParams.set('sort', params.sort);\n    if (params.limit) searchParams.set('limit', String(params.limit));\n    if (params.offset) searchParams.set('offset', String(params.offset));\n\n    const queryString = searchParams.toString();\n    const url = `${this.registryUrl}/v1/skills/search${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to search skills: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillSearchResponse>;\n  }\n\n  /**\n   * Get skill details\n   */\n  async getSkill(name: string): Promise<SkillDetailResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDetailResponse>;\n  }\n\n  /**\n   * Get download info for a skill (latest version)\n   */\n  async getSkillDownload(name: string): Promise<SkillDownloadResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}/download`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDownloadResponse>;\n  }\n\n  /**\n   * Get download info for a specific skill version\n   */\n  async getSkillVersionDownload(name: string, version: string): Promise<SkillDownloadResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}/versions/${version}/download`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDownloadResponse>;\n  }\n\n  /**\n   * Download skill content and verify integrity\n   *\n   * @throws {MpakIntegrityError} If expectedSha256 is provided and doesn't match (fail-closed)\n   */\n  async downloadSkillContent(\n    downloadUrl: string,\n    expectedSha256?: string\n  ): Promise<{ content: string; verified: boolean }> {\n    const response = await this.fetchWithTimeout(downloadUrl);\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to download skill: HTTP ${response.status}`);\n    }\n\n    const content = await response.text();\n\n    if (expectedSha256) {\n      const actualHash = this.computeSha256(content);\n      if (actualHash !== expectedSha256) {\n        throw new MpakIntegrityError(expectedSha256, actualHash);\n      }\n      return { content, verified: true };\n    }\n\n    return { content, verified: false };\n  }\n\n  /**\n   * Resolve a skill reference to actual content\n   *\n   * Supports mpak, github, and url sources. This is the main method for\n   * fetching skill content from any supported source.\n   *\n   * @throws {MpakNotFoundError} If skill not found\n   * @throws {MpakIntegrityError} If integrity check fails (fail-closed)\n   * @throws {MpakNetworkError} For network failures\n   *\n   * @example\n   * ```typescript\n   * // Resolve from mpak registry\n   * const skill = await client.resolveSkillRef({\n   *   source: 'mpak',\n   *   name: '@nimblebraininc/folk-crm',\n   *   version: '1.3.0',\n   * });\n   *\n   * // Resolve from GitHub\n   * const skill = await client.resolveSkillRef({\n   *   source: 'github',\n   *   name: '@example/my-skill',\n   *   version: 'v1.0.0',\n   *   repo: 'owner/repo',\n   *   path: 'skills/my-skill/SKILL.md',\n   * });\n   *\n   * // Resolve from URL\n   * const skill = await client.resolveSkillRef({\n   *   source: 'url',\n   *   name: '@example/custom',\n   *   version: '1.0.0',\n   *   url: 'https://example.com/skill.md',\n   * });\n   * ```\n   */\n  async resolveSkillRef(ref: SkillReference): Promise<ResolvedSkill> {\n    switch (ref.source) {\n      case 'mpak':\n        return this.resolveMpakSkill(ref);\n      case 'github':\n        return this.resolveGithubSkill(ref);\n      case 'url':\n        return this.resolveUrlSkill(ref);\n      default: {\n        const _exhaustive: never = ref;\n        throw new Error(`Unknown skill source: ${(_exhaustive as SkillReference).source}`);\n      }\n    }\n  }\n\n  /**\n   * Resolve a skill from mpak registry\n   *\n   * The API returns a ZIP bundle containing SKILL.md and metadata.\n   */\n  private async resolveMpakSkill(ref: SkillReference & { source: 'mpak' }): Promise<ResolvedSkill> {\n    const url = `${this.registryUrl}/v1/skills/${ref.name}/versions/${ref.version}/download`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${ref.name}@${ref.version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to fetch skill: HTTP ${response.status}`);\n    }\n\n    // Response is a ZIP file - extract SKILL.md\n    const zipBuffer = await response.arrayBuffer();\n    const content = await this.extractSkillFromZip(zipBuffer, ref.name);\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return { content, version: ref.version, source: 'mpak', verified: true };\n    }\n\n    return { content, version: ref.version, source: 'mpak', verified: false };\n  }\n\n  /**\n   * Resolve a skill from GitHub releases\n   */\n  private async resolveGithubSkill(ref: GithubSkillReference): Promise<ResolvedSkill> {\n    const url = `https://github.com/${ref.repo}/releases/download/${ref.version}/${ref.path}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (!response.ok) {\n      throw new MpakNotFoundError(`github:${ref.repo}/${ref.path}@${ref.version}`);\n    }\n\n    const content = await response.text();\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return { content, version: ref.version, source: 'github', verified: true };\n    }\n\n    return { content, version: ref.version, source: 'github', verified: false };\n  }\n\n  /**\n   * Resolve a skill from a direct URL\n   */\n  private async resolveUrlSkill(ref: UrlSkillReference): Promise<ResolvedSkill> {\n    const response = await this.fetchWithTimeout(ref.url);\n\n    if (!response.ok) {\n      throw new MpakNotFoundError(`url:${ref.url}`);\n    }\n\n    const content = await response.text();\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return { content, version: ref.version, source: 'url', verified: true };\n    }\n\n    return { content, version: ref.version, source: 'url', verified: false };\n  }\n\n  /**\n   * Extract SKILL.md content from a skill bundle ZIP\n   */\n  private async extractSkillFromZip(zipBuffer: ArrayBuffer, skillName: string): Promise<string> {\n    const JSZip = (await import('jszip')).default;\n    const zip = await JSZip.loadAsync(zipBuffer);\n\n    // Skill name format: @scope/name -> folder is just 'name'\n    const folderName = skillName.split('/').pop() ?? skillName;\n    const skillPath = `${folderName}/SKILL.md`;\n\n    const skillFile = zip.file(skillPath);\n    if (!skillFile) {\n      // Try without folder prefix\n      const altFile = zip.file('SKILL.md');\n      if (!altFile) {\n        throw new MpakNotFoundError(`SKILL.md not found in bundle for ${skillName}`);\n      }\n      return altFile.async('string');\n    }\n\n    return skillFile.async('string');\n  }\n\n  /**\n   * Verify content integrity and throw if mismatch (fail-closed)\n   */\n  private verifyIntegrityOrThrow(content: string, integrity: string): void {\n    const expectedHash = this.extractHash(integrity);\n    const actualHash = this.computeSha256(content);\n\n    if (actualHash !== expectedHash) {\n      throw new MpakIntegrityError(expectedHash, actualHash);\n    }\n  }\n\n  /**\n   * Extract hash from integrity string (removes prefix)\n   */\n  private extractHash(integrity: string): string {\n    if (integrity.startsWith('sha256:')) {\n      return integrity.slice(7);\n    }\n    if (integrity.startsWith('sha256-')) {\n      return integrity.slice(7);\n    }\n    return integrity;\n  }\n\n  // ===========================================================================\n  // Utility Methods\n  // ===========================================================================\n\n  /**\n   * Detect the current platform\n   */\n  static detectPlatform(): Platform {\n    const nodePlatform = process.platform;\n    const nodeArch = process.arch;\n\n    let os: string;\n    switch (nodePlatform) {\n      case 'darwin':\n        os = 'darwin';\n        break;\n      case 'win32':\n        os = 'win32';\n        break;\n      case 'linux':\n        os = 'linux';\n        break;\n      default:\n        os = 'any';\n    }\n\n    let arch: string;\n    switch (nodeArch) {\n      case 'x64':\n        arch = 'x64';\n        break;\n      case 'arm64':\n        arch = 'arm64';\n        break;\n      default:\n        arch = 'any';\n    }\n\n    return { os, arch };\n  }\n\n  /**\n   * Compute SHA256 hash of content\n   */\n  private computeSha256(content: string): string {\n    return createHash('sha256').update(content, 'utf8').digest('hex');\n  }\n\n  /**\n   * Validate that a name is scoped (@scope/name)\n   */\n  private validateScopedName(name: string): void {\n    if (!name.startsWith('@')) {\n      throw new Error('Package name must be scoped (e.g., @scope/package-name)');\n    }\n  }\n\n  /**\n   * Fetch with timeout support\n   */\n  private async fetchWithTimeout(\n    url: string,\n    init?: RequestInit\n  ): Promise<Response> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => {\n      controller.abort();\n    }, this.timeout);\n\n    try {\n      return await fetch(url, { ...init, signal: controller.signal });\n    } catch (error) {\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new MpakNetworkError(`Request timeout after ${this.timeout}ms`);\n      }\n      throw new MpakNetworkError(\n        error instanceof Error ? error.message : 'Network error'\n      );\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n}\n","/**\n * Base error class for mpak SDK errors\n */\nexport class MpakError extends Error {\n  code: string;\n  statusCode?: number;\n\n  constructor(message: string, code: string, statusCode?: number) {\n    super(message);\n    this.name = 'MpakError';\n    this.code = code;\n    this.statusCode = statusCode;\n  }\n}\n\n/**\n * Thrown when a requested resource is not found (404)\n */\nexport class MpakNotFoundError extends MpakError {\n  constructor(resource: string) {\n    super(`Resource not found: ${resource}`, 'NOT_FOUND', 404);\n    this.name = 'MpakNotFoundError';\n  }\n}\n\n/**\n * Thrown when integrity verification fails (hash mismatch)\n * This is a fail-closed error - content is NOT returned when this is thrown\n */\nexport class MpakIntegrityError extends MpakError {\n  expected: string;\n  actual: string;\n\n  constructor(expected: string, actual: string) {\n    super(\n      `Integrity mismatch: expected ${expected}, got ${actual}`,\n      'INTEGRITY_MISMATCH'\n    );\n    this.name = 'MpakIntegrityError';\n    this.expected = expected;\n    this.actual = actual;\n  }\n}\n\n/**\n * Thrown for network-related failures (timeouts, connection errors)\n */\nexport class MpakNetworkError extends MpakError {\n  constructor(message: string) {\n    super(message, 'NETWORK_ERROR');\n    this.name = 'MpakNetworkError';\n  }\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;;;ACGpB,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,MAAc,YAAqB;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAKO,IAAM,oBAAN,cAAgC,UAAU;AAAA,EAC/C,YAAY,UAAkB;AAC5B,UAAM,uBAAuB,QAAQ,IAAI,aAAa,GAAG;AACzD,SAAK,OAAO;AAAA,EACd;AACF;AAMO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD;AAAA,EACA;AAAA,EAEA,YAAY,UAAkB,QAAgB;AAC5C;AAAA,MACE,gCAAgC,QAAQ,SAAS,MAAM;AAAA,MACvD;AAAA,IACF;AACA,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,SAAS;AAAA,EAChB;AACF;AAKO,IAAM,mBAAN,cAA+B,UAAU;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,SAAS,eAAe;AAC9B,SAAK,OAAO;AAAA,EACd;AACF;;;AD3BA,IAAM,uBAAuB;AAC7B,IAAM,kBAAkB;AAQjB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EAEjB,YAAY,SAA2B,CAAC,GAAG;AACzC,SAAK,cAAc,OAAO,eAAe;AACzC,SAAK,UAAU,OAAO,WAAW;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,cAAc,SAA6B,CAAC,GAAkC;AAClF,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,EAAG,cAAa,IAAI,KAAK,OAAO,CAAC;AAC5C,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAChE,QAAI,OAAO,OAAQ,cAAa,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AAEnE,UAAM,cAAc,aAAa,SAAS;AAC1C,UAAM,MAAM,GAAG,KAAK,WAAW,qBAAqB,cAAc,IAAI,WAAW,KAAK,EAAE;AAExF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,kCAAkC,SAAS,MAAM,EAAE;AAAA,IAChF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,MAA6C;AAC3D,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI;AAClD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,8BAA8B,SAAS,MAAM,EAAE;AAAA,IAC5E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAkB,MAA+C;AACrE,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI;AAClD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,uCAAuC,SAAS,MAAM,EAAE;AAAA,IACrF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,MAAc,SAAiD;AACpF,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI,aAAa,OAAO;AACtE,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBACJ,MACA,SACA,UACiC;AACjC,SAAK,mBAAmB,IAAI;AAE5B,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU;AACZ,aAAO,IAAI,MAAM,SAAS,EAAE;AAC5B,aAAO,IAAI,QAAQ,SAAS,IAAI;AAAA,IAClC;AAEA,UAAM,cAAc,OAAO,SAAS;AACpC,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI,aAAa,OAAO,YAAY,cAAc,IAAI,WAAW,KAAK,EAAE;AAEtH,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,uCAAuC,SAAS,MAAM,EAAE;AAAA,IACrF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAa,SAA4B,CAAC,GAAiC;AAC/E,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,EAAG,cAAa,IAAI,KAAK,OAAO,CAAC;AAC5C,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,SAAU,cAAa,IAAI,YAAY,OAAO,QAAQ;AACjE,QAAI,OAAO,QAAS,cAAa,IAAI,WAAW,OAAO,OAAO;AAC9D,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAChE,QAAI,OAAO,OAAQ,cAAa,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AAEnE,UAAM,cAAc,aAAa,SAAS;AAC1C,UAAM,MAAM,GAAG,KAAK,WAAW,oBAAoB,cAAc,IAAI,WAAW,KAAK,EAAE;AAEvF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,iCAAiC,SAAS,MAAM,EAAE;AAAA,IAC/E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,MAA4C;AACzD,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI;AACjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,6BAA6B,SAAS,MAAM,EAAE;AAAA,IAC3E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,MAA8C;AACnE,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI;AAEjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,wBAAwB,MAAc,SAAiD;AAC3F,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI,aAAa,OAAO;AAErE,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,qBACJ,aACA,gBACiD;AACjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,WAAW;AAExD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,kCAAkC,SAAS,MAAM,EAAE;AAAA,IAChF;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,gBAAgB;AAClB,YAAM,aAAa,KAAK,cAAc,OAAO;AAC7C,UAAI,eAAe,gBAAgB;AACjC,cAAM,IAAI,mBAAmB,gBAAgB,UAAU;AAAA,MACzD;AACA,aAAO,EAAE,SAAS,UAAU,KAAK;AAAA,IACnC;AAEA,WAAO,EAAE,SAAS,UAAU,MAAM;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuCA,MAAM,gBAAgB,KAA6C;AACjE,YAAQ,IAAI,QAAQ;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,iBAAiB,GAAG;AAAA,MAClC,KAAK;AACH,eAAO,KAAK,mBAAmB,GAAG;AAAA,MACpC,KAAK;AACH,eAAO,KAAK,gBAAgB,GAAG;AAAA,MACjC,SAAS;AACP,cAAM,cAAqB;AAC3B,cAAM,IAAI,MAAM,yBAA0B,YAA+B,MAAM,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,iBAAiB,KAAkE;AAC/F,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI,IAAI,aAAa,IAAI,OAAO;AAE7E,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE;AAAA,IAC1D;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,+BAA+B,SAAS,MAAM,EAAE;AAAA,IAC7E;AAGA,UAAM,YAAY,MAAM,SAAS,YAAY;AAC7C,UAAM,UAAU,MAAM,KAAK,oBAAoB,WAAW,IAAI,IAAI;AAElE,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,QAAQ,UAAU,KAAK;AAAA,IACzE;AAEA,WAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,QAAQ,UAAU,MAAM;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,mBAAmB,KAAmD;AAClF,UAAM,MAAM,sBAAsB,IAAI,IAAI,sBAAsB,IAAI,OAAO,IAAI,IAAI,IAAI;AACvF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,kBAAkB,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE;AAAA,IAC7E;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,UAAU,UAAU,KAAK;AAAA,IAC3E;AAEA,WAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,UAAU,UAAU,MAAM;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAAgB,KAAgD;AAC5E,UAAM,WAAW,MAAM,KAAK,iBAAiB,IAAI,GAAG;AAEpD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,kBAAkB,OAAO,IAAI,GAAG,EAAE;AAAA,IAC9C;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,OAAO,UAAU,KAAK;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,OAAO,UAAU,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,oBAAoB,WAAwB,WAAoC;AAC5F,UAAM,SAAS,MAAM,OAAO,OAAO,GAAG;AACtC,UAAM,MAAM,MAAM,MAAM,UAAU,SAAS;AAG3C,UAAM,aAAa,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AACjD,UAAM,YAAY,GAAG,UAAU;AAE/B,UAAM,YAAY,IAAI,KAAK,SAAS;AACpC,QAAI,CAAC,WAAW;AAEd,YAAM,UAAU,IAAI,KAAK,UAAU;AACnC,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,kBAAkB,oCAAoC,SAAS,EAAE;AAAA,MAC7E;AACA,aAAO,QAAQ,MAAM,QAAQ;AAAA,IAC/B;AAEA,WAAO,UAAU,MAAM,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAAuB,SAAiB,WAAyB;AACvE,UAAM,eAAe,KAAK,YAAY,SAAS;AAC/C,UAAM,aAAa,KAAK,cAAc,OAAO;AAE7C,QAAI,eAAe,cAAc;AAC/B,YAAM,IAAI,mBAAmB,cAAc,UAAU;AAAA,IACvD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,WAA2B;AAC7C,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,aAAO,UAAU,MAAM,CAAC;AAAA,IAC1B;AACA,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,aAAO,UAAU,MAAM,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,iBAA2B;AAChC,UAAM,eAAe,QAAQ;AAC7B,UAAM,WAAW,QAAQ;AAEzB,QAAI;AACJ,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,aAAK;AACL;AAAA,MACF,KAAK;AACH,aAAK;AACL;AAAA,MACF,KAAK;AACH,aAAK;AACL;AAAA,MACF;AACE,aAAK;AAAA,IACT;AAEA,QAAI;AACJ,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,eAAO;AACP;AAAA,MACF,KAAK;AACH,eAAO;AACP;AAAA,MACF;AACE,eAAO;AAAA,IACX;AAEA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,SAAyB;AAC7C,WAAO,WAAW,QAAQ,EAAE,OAAO,SAAS,MAAM,EAAE,OAAO,KAAK;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,MAAoB;AAC7C,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBACZ,KACA,MACmB;AACnB,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW,MAAM;AAAA,IACnB,GAAG,KAAK,OAAO;AAEf,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,QAAQ,WAAW,OAAO,CAAC;AAAA,IAChE,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,SAAS,cAAc;AACzD,cAAM,IAAI,iBAAiB,yBAAyB,KAAK,OAAO,IAAI;AAAA,MACtE;AACA,YAAM,IAAI;AAAA,QACR,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AAAA,IACF,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/client.ts","../src/errors.ts"],"sourcesContent":["import { createHash } from 'crypto';\nimport type {\n  MpakClientConfig,\n  BundleSearchParams,\n  BundleDetailResponse,\n  BundleVersionsResponse,\n  BundleVersionResponse,\n  BundleDownloadResponse,\n  SkillDetailResponse,\n  SkillDownloadResponse,\n  SkillSearchParams,\n  Platform,\n  SkillReference,\n  GithubSkillReference,\n  UrlSkillReference,\n  ResolvedSkill,\n} from './types.js';\nimport type { BundleSearchResponse, SkillSearchResponse } from '@nimblebrain/mpak-schemas';\nimport { MpakNotFoundError, MpakIntegrityError, MpakNetworkError } from './errors.js';\n\nconst DEFAULT_REGISTRY_URL = 'https://registry.mpak.dev';\nconst DEFAULT_TIMEOUT = 30000;\n\n/**\n * Client for interacting with the mpak registry\n *\n * Requires Node.js 18+ for native fetch support.\n * Uses jszip for skill bundle extraction.\n */\nexport class MpakClient {\n  private readonly registryUrl: string;\n  private readonly timeout: number;\n  private readonly userAgent: string | undefined;\n\n  constructor(config: MpakClientConfig = {}) {\n    this.registryUrl = config.registryUrl ?? DEFAULT_REGISTRY_URL;\n    this.timeout = config.timeout ?? DEFAULT_TIMEOUT;\n    this.userAgent = config.userAgent;\n  }\n\n  // ===========================================================================\n  // Bundle API\n  // ===========================================================================\n\n  /**\n   * Search for bundles\n   */\n  async searchBundles(params: BundleSearchParams = {}): Promise<BundleSearchResponse> {\n    const searchParams = new URLSearchParams();\n    if (params.q) searchParams.set('q', params.q);\n    if (params.type) searchParams.set('type', params.type);\n    if (params.sort) searchParams.set('sort', params.sort);\n    if (params.limit) searchParams.set('limit', String(params.limit));\n    if (params.offset) searchParams.set('offset', String(params.offset));\n\n    const queryString = searchParams.toString();\n    const url = `${this.registryUrl}/v1/bundles/search${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError('bundles/search endpoint');\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to search bundles: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleSearchResponse>;\n  }\n\n  /**\n   * Get bundle details\n   */\n  async getBundle(name: string): Promise<BundleDetailResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleDetailResponse>;\n  }\n\n  /**\n   * Get all versions of a bundle\n   */\n  async getBundleVersions(name: string): Promise<BundleVersionsResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle versions: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleVersionsResponse>;\n  }\n\n  /**\n   * Get a specific version of a bundle\n   */\n  async getBundleVersion(name: string, version: string): Promise<BundleVersionResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions/${version}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle version: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleVersionResponse>;\n  }\n\n  /**\n   * Get download info for a bundle\n   */\n  async getBundleDownload(\n    name: string,\n    version: string,\n    platform?: Platform,\n  ): Promise<BundleDownloadResponse> {\n    this.validateScopedName(name);\n\n    const params = new URLSearchParams();\n    if (platform) {\n      params.set('os', platform.os);\n      params.set('arch', platform.arch);\n    }\n\n    const queryString = params.toString();\n    const url = `${this.registryUrl}/v1/bundles/${name}/versions/${version}/download${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get bundle download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<BundleDownloadResponse>;\n  }\n\n  // ===========================================================================\n  // Skill API\n  // ===========================================================================\n\n  /**\n   * Search for skills\n   */\n  async searchSkills(params: SkillSearchParams = {}): Promise<SkillSearchResponse> {\n    const searchParams = new URLSearchParams();\n    if (params.q) searchParams.set('q', params.q);\n    if (params.tags) searchParams.set('tags', params.tags);\n    if (params.category) searchParams.set('category', params.category);\n    if (params.surface) searchParams.set('surface', params.surface);\n    if (params.sort) searchParams.set('sort', params.sort);\n    if (params.limit) searchParams.set('limit', String(params.limit));\n    if (params.offset) searchParams.set('offset', String(params.offset));\n\n    const queryString = searchParams.toString();\n    const url = `${this.registryUrl}/v1/skills/search${queryString ? `?${queryString}` : ''}`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError('skills/search endpoint');\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to search skills: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillSearchResponse>;\n  }\n\n  /**\n   * Get skill details\n   */\n  async getSkill(name: string): Promise<SkillDetailResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDetailResponse>;\n  }\n\n  /**\n   * Get download info for a skill (latest version)\n   */\n  async getSkillDownload(name: string): Promise<SkillDownloadResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}/download`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(name);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDownloadResponse>;\n  }\n\n  /**\n   * Get download info for a specific skill version\n   */\n  async getSkillVersionDownload(name: string, version: string): Promise<SkillDownloadResponse> {\n    this.validateScopedName(name);\n\n    const url = `${this.registryUrl}/v1/skills/${name}/versions/${version}/download`;\n\n    const response = await this.fetchWithTimeout(url, {\n      headers: { Accept: 'application/json' },\n    });\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${name}@${version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to get skill download: HTTP ${response.status}`);\n    }\n\n    return response.json() as Promise<SkillDownloadResponse>;\n  }\n\n  /**\n   * Download skill content and verify integrity\n   *\n   * @throws {MpakIntegrityError} If expectedSha256 is provided and doesn't match (fail-closed)\n   */\n  async downloadSkillContent(\n    downloadUrl: string,\n    expectedSha256?: string,\n  ): Promise<{ content: string; verified: boolean }> {\n    const response = await this.fetchWithTimeout(downloadUrl);\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to download skill: HTTP ${response.status}`);\n    }\n\n    const content = await response.text();\n\n    if (expectedSha256) {\n      const actualHash = this.computeSha256(content);\n      if (actualHash !== expectedSha256) {\n        throw new MpakIntegrityError(expectedSha256, actualHash);\n      }\n      return { content, verified: true };\n    }\n\n    return { content, verified: false };\n  }\n\n  /**\n   * Resolve a skill reference to actual content\n   *\n   * Supports mpak, github, and url sources. This is the main method for\n   * fetching skill content from any supported source.\n   *\n   * @throws {MpakNotFoundError} If skill not found\n   * @throws {MpakIntegrityError} If integrity check fails (fail-closed)\n   * @throws {MpakNetworkError} For network failures\n   *\n   * @example\n   * ```typescript\n   * // Resolve from mpak registry\n   * const skill = await client.resolveSkillRef({\n   *   source: 'mpak',\n   *   name: '@nimblebraininc/folk-crm',\n   *   version: '1.3.0',\n   * });\n   *\n   * // Resolve from GitHub\n   * const skill = await client.resolveSkillRef({\n   *   source: 'github',\n   *   name: '@example/my-skill',\n   *   version: 'v1.0.0',\n   *   repo: 'owner/repo',\n   *   path: 'skills/my-skill/SKILL.md',\n   * });\n   *\n   * // Resolve from URL\n   * const skill = await client.resolveSkillRef({\n   *   source: 'url',\n   *   name: '@example/custom',\n   *   version: '1.0.0',\n   *   url: 'https://example.com/skill.md',\n   * });\n   * ```\n   */\n  async resolveSkillRef(ref: SkillReference): Promise<ResolvedSkill> {\n    switch (ref.source) {\n      case 'mpak':\n        return this.resolveMpakSkill(ref);\n      case 'github':\n        return this.resolveGithubSkill(ref);\n      case 'url':\n        return this.resolveUrlSkill(ref);\n      default: {\n        const _exhaustive: never = ref;\n        throw new Error(`Unknown skill source: ${(_exhaustive as SkillReference).source}`);\n      }\n    }\n  }\n\n  /**\n   * Resolve a skill from mpak registry\n   *\n   * The API returns a ZIP bundle containing SKILL.md and metadata.\n   */\n  private async resolveMpakSkill(ref: SkillReference & { source: 'mpak' }): Promise<ResolvedSkill> {\n    const url = `${this.registryUrl}/v1/skills/${ref.name}/versions/${ref.version}/download`;\n\n    const response = await this.fetchWithTimeout(url);\n\n    if (response.status === 404) {\n      throw new MpakNotFoundError(`${ref.name}@${ref.version}`);\n    }\n\n    if (!response.ok) {\n      throw new MpakNetworkError(`Failed to fetch skill: HTTP ${response.status}`);\n    }\n\n    // Response is a ZIP file - extract SKILL.md\n    const zipBuffer = await response.arrayBuffer();\n    const content = await this.extractSkillFromZip(zipBuffer, ref.name);\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return { content, version: ref.version, source: 'mpak', verified: true };\n    }\n\n    return { content, version: ref.version, source: 'mpak', verified: false };\n  }\n\n  /**\n   * Resolve a skill from GitHub releases\n   */\n  private async resolveGithubSkill(ref: GithubSkillReference): Promise<ResolvedSkill> {\n    const url = `https://github.com/${ref.repo}/releases/download/${ref.version}/${ref.path}`;\n    const response = await this.fetchWithTimeout(url);\n\n    if (!response.ok) {\n      throw new MpakNotFoundError(`github:${ref.repo}/${ref.path}@${ref.version}`);\n    }\n\n    const content = await response.text();\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return {\n        content,\n        version: ref.version,\n        source: 'github',\n        verified: true,\n      };\n    }\n\n    return {\n      content,\n      version: ref.version,\n      source: 'github',\n      verified: false,\n    };\n  }\n\n  /**\n   * Resolve a skill from a direct URL\n   */\n  private async resolveUrlSkill(ref: UrlSkillReference): Promise<ResolvedSkill> {\n    const response = await this.fetchWithTimeout(ref.url);\n\n    if (!response.ok) {\n      throw new MpakNotFoundError(`url:${ref.url}`);\n    }\n\n    const content = await response.text();\n\n    if (ref.integrity) {\n      this.verifyIntegrityOrThrow(content, ref.integrity);\n      return { content, version: ref.version, source: 'url', verified: true };\n    }\n\n    return { content, version: ref.version, source: 'url', verified: false };\n  }\n\n  /**\n   * Extract SKILL.md content from a skill bundle ZIP\n   */\n  private async extractSkillFromZip(zipBuffer: ArrayBuffer, skillName: string): Promise<string> {\n    const JSZip = (await import('jszip')).default;\n    const zip = await JSZip.loadAsync(zipBuffer);\n\n    // Skill name format: @scope/name -> folder is just 'name'\n    const folderName = skillName.split('/').pop() ?? skillName;\n    const skillPath = `${folderName}/SKILL.md`;\n\n    const skillFile = zip.file(skillPath);\n    if (!skillFile) {\n      // Try without folder prefix\n      const altFile = zip.file('SKILL.md');\n      if (!altFile) {\n        throw new MpakNotFoundError(`SKILL.md not found in bundle for ${skillName}`);\n      }\n      return altFile.async('string');\n    }\n\n    return skillFile.async('string');\n  }\n\n  /**\n   * Verify content integrity and throw if mismatch (fail-closed)\n   */\n  private verifyIntegrityOrThrow(content: string, integrity: string): void {\n    const expectedHash = this.extractHash(integrity);\n    const actualHash = this.computeSha256(content);\n\n    if (actualHash !== expectedHash) {\n      throw new MpakIntegrityError(expectedHash, actualHash);\n    }\n  }\n\n  /**\n   * Extract hash from integrity string (removes prefix)\n   */\n  private extractHash(integrity: string): string {\n    if (integrity.startsWith('sha256:')) {\n      return integrity.slice(7);\n    }\n    if (integrity.startsWith('sha256-')) {\n      return integrity.slice(7);\n    }\n    return integrity;\n  }\n\n  // ===========================================================================\n  // Utility Methods\n  // ===========================================================================\n\n  /**\n   * Detect the current platform\n   */\n  static detectPlatform(): Platform {\n    const nodePlatform = process.platform;\n    const nodeArch = process.arch;\n\n    let os: string;\n    switch (nodePlatform) {\n      case 'darwin':\n        os = 'darwin';\n        break;\n      case 'win32':\n        os = 'win32';\n        break;\n      case 'linux':\n        os = 'linux';\n        break;\n      default:\n        os = 'any';\n    }\n\n    let arch: string;\n    switch (nodeArch) {\n      case 'x64':\n        arch = 'x64';\n        break;\n      case 'arm64':\n        arch = 'arm64';\n        break;\n      default:\n        arch = 'any';\n    }\n\n    return { os, arch };\n  }\n\n  /**\n   * Compute SHA256 hash of content\n   */\n  private computeSha256(content: string): string {\n    return createHash('sha256').update(content, 'utf8').digest('hex');\n  }\n\n  /**\n   * Validate that a name is scoped (@scope/name)\n   */\n  private validateScopedName(name: string): void {\n    if (!name.startsWith('@')) {\n      throw new Error('Package name must be scoped (e.g., @scope/package-name)');\n    }\n  }\n\n  /**\n   * Fetch with timeout support\n   */\n  private async fetchWithTimeout(url: string, init?: RequestInit): Promise<Response> {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => {\n      controller.abort();\n    }, this.timeout);\n\n    const headers: Record<string, string> = {\n      ...(init?.headers as Record<string, string>),\n    };\n    if (this.userAgent) {\n      headers['User-Agent'] = this.userAgent;\n    }\n\n    try {\n      return await fetch(url, {\n        ...init,\n        headers,\n        signal: controller.signal,\n      });\n    } catch (error) {\n      if (error instanceof Error && error.name === 'AbortError') {\n        throw new MpakNetworkError(`Request timeout after ${this.timeout}ms`);\n      }\n      throw new MpakNetworkError(error instanceof Error ? error.message : 'Network error');\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n}\n","/**\n * Base error class for mpak SDK errors\n */\nexport class MpakError extends Error {\n  code: string;\n  statusCode: number | undefined;\n\n  constructor(message: string, code: string, statusCode?: number) {\n    super(message);\n    this.name = 'MpakError';\n    this.code = code;\n    this.statusCode = statusCode;\n  }\n}\n\n/**\n * Thrown when a requested resource is not found (404)\n */\nexport class MpakNotFoundError extends MpakError {\n  constructor(resource: string) {\n    super(`Resource not found: ${resource}`, 'NOT_FOUND', 404);\n    this.name = 'MpakNotFoundError';\n  }\n}\n\n/**\n * Thrown when integrity verification fails (hash mismatch)\n * This is a fail-closed error - content is NOT returned when this is thrown\n */\nexport class MpakIntegrityError extends MpakError {\n  expected: string;\n  actual: string;\n\n  constructor(expected: string, actual: string) {\n    super(`Integrity mismatch: expected ${expected}, got ${actual}`, 'INTEGRITY_MISMATCH');\n    this.name = 'MpakIntegrityError';\n    this.expected = expected;\n    this.actual = actual;\n  }\n}\n\n/**\n * Thrown for network-related failures (timeouts, connection errors)\n */\nexport class MpakNetworkError extends MpakError {\n  constructor(message: string) {\n    super(message, 'NETWORK_ERROR');\n    this.name = 'MpakNetworkError';\n  }\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;;;ACGpB,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,MAAc,YAAqB;AAC9D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,OAAO;AACZ,SAAK,aAAa;AAAA,EACpB;AACF;AAKO,IAAM,oBAAN,cAAgC,UAAU;AAAA,EAC/C,YAAY,UAAkB;AAC5B,UAAM,uBAAuB,QAAQ,IAAI,aAAa,GAAG;AACzD,SAAK,OAAO;AAAA,EACd;AACF;AAMO,IAAM,qBAAN,cAAiC,UAAU;AAAA,EAChD;AAAA,EACA;AAAA,EAEA,YAAY,UAAkB,QAAgB;AAC5C,UAAM,gCAAgC,QAAQ,SAAS,MAAM,IAAI,oBAAoB;AACrF,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,SAAS;AAAA,EAChB;AACF;AAKO,IAAM,mBAAN,cAA+B,UAAU;AAAA,EAC9C,YAAY,SAAiB;AAC3B,UAAM,SAAS,eAAe;AAC9B,SAAK,OAAO;AAAA,EACd;AACF;;;AD7BA,IAAM,uBAAuB;AAC7B,IAAM,kBAAkB;AAQjB,IAAM,aAAN,MAAiB;AAAA,EACL;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,SAA2B,CAAC,GAAG;AACzC,SAAK,cAAc,OAAO,eAAe;AACzC,SAAK,UAAU,OAAO,WAAW;AACjC,SAAK,YAAY,OAAO;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,cAAc,SAA6B,CAAC,GAAkC;AAClF,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,EAAG,cAAa,IAAI,KAAK,OAAO,CAAC;AAC5C,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAChE,QAAI,OAAO,OAAQ,cAAa,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AAEnE,UAAM,cAAc,aAAa,SAAS;AAC1C,UAAM,MAAM,GAAG,KAAK,WAAW,qBAAqB,cAAc,IAAI,WAAW,KAAK,EAAE;AAExF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,yBAAyB;AAAA,IACvD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,kCAAkC,SAAS,MAAM,EAAE;AAAA,IAChF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,MAA6C;AAC3D,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI;AAClD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,8BAA8B,SAAS,MAAM,EAAE;AAAA,IAC5E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAkB,MAA+C;AACrE,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI;AAClD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,uCAAuC,SAAS,MAAM,EAAE;AAAA,IACrF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,MAAc,SAAiD;AACpF,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI,aAAa,OAAO;AACtE,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBACJ,MACA,SACA,UACiC;AACjC,SAAK,mBAAmB,IAAI;AAE5B,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI,UAAU;AACZ,aAAO,IAAI,MAAM,SAAS,EAAE;AAC5B,aAAO,IAAI,QAAQ,SAAS,IAAI;AAAA,IAClC;AAEA,UAAM,cAAc,OAAO,SAAS;AACpC,UAAM,MAAM,GAAG,KAAK,WAAW,eAAe,IAAI,aAAa,OAAO,YAAY,cAAc,IAAI,WAAW,KAAK,EAAE;AAEtH,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,uCAAuC,SAAS,MAAM,EAAE;AAAA,IACrF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,aAAa,SAA4B,CAAC,GAAiC;AAC/E,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,OAAO,EAAG,cAAa,IAAI,KAAK,OAAO,CAAC;AAC5C,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,SAAU,cAAa,IAAI,YAAY,OAAO,QAAQ;AACjE,QAAI,OAAO,QAAS,cAAa,IAAI,WAAW,OAAO,OAAO;AAC9D,QAAI,OAAO,KAAM,cAAa,IAAI,QAAQ,OAAO,IAAI;AACrD,QAAI,OAAO,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AAChE,QAAI,OAAO,OAAQ,cAAa,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AAEnE,UAAM,cAAc,aAAa,SAAS;AAC1C,UAAM,MAAM,GAAG,KAAK,WAAW,oBAAoB,cAAc,IAAI,WAAW,KAAK,EAAE;AAEvF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,wBAAwB;AAAA,IACtD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,iCAAiC,SAAS,MAAM,EAAE;AAAA,IAC/E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,MAA4C;AACzD,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI;AACjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,6BAA6B,SAAS,MAAM,EAAE;AAAA,IAC3E;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAiB,MAA8C;AACnE,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI;AAEjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,IAAI;AAAA,IAClC;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,wBAAwB,MAAc,SAAiD;AAC3F,SAAK,mBAAmB,IAAI;AAE5B,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI,aAAa,OAAO;AAErE,UAAM,WAAW,MAAM,KAAK,iBAAiB,KAAK;AAAA,MAChD,SAAS,EAAE,QAAQ,mBAAmB;AAAA,IACxC,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,OAAO,EAAE;AAAA,IAClD;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,sCAAsC,SAAS,MAAM,EAAE;AAAA,IACpF;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,qBACJ,aACA,gBACiD;AACjD,UAAM,WAAW,MAAM,KAAK,iBAAiB,WAAW;AAExD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,kCAAkC,SAAS,MAAM,EAAE;AAAA,IAChF;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,gBAAgB;AAClB,YAAM,aAAa,KAAK,cAAc,OAAO;AAC7C,UAAI,eAAe,gBAAgB;AACjC,cAAM,IAAI,mBAAmB,gBAAgB,UAAU;AAAA,MACzD;AACA,aAAO,EAAE,SAAS,UAAU,KAAK;AAAA,IACnC;AAEA,WAAO,EAAE,SAAS,UAAU,MAAM;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuCA,MAAM,gBAAgB,KAA6C;AACjE,YAAQ,IAAI,QAAQ;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,iBAAiB,GAAG;AAAA,MAClC,KAAK;AACH,eAAO,KAAK,mBAAmB,GAAG;AAAA,MACpC,KAAK;AACH,eAAO,KAAK,gBAAgB,GAAG;AAAA,MACjC,SAAS;AACP,cAAM,cAAqB;AAC3B,cAAM,IAAI,MAAM,yBAA0B,YAA+B,MAAM,EAAE;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,iBAAiB,KAAkE;AAC/F,UAAM,MAAM,GAAG,KAAK,WAAW,cAAc,IAAI,IAAI,aAAa,IAAI,OAAO;AAE7E,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,kBAAkB,GAAG,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE;AAAA,IAC1D;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,iBAAiB,+BAA+B,SAAS,MAAM,EAAE;AAAA,IAC7E;AAGA,UAAM,YAAY,MAAM,SAAS,YAAY;AAC7C,UAAM,UAAU,MAAM,KAAK,oBAAoB,WAAW,IAAI,IAAI;AAElE,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,QAAQ,UAAU,KAAK;AAAA,IACzE;AAEA,WAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,QAAQ,UAAU,MAAM;AAAA,EAC1E;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,mBAAmB,KAAmD;AAClF,UAAM,MAAM,sBAAsB,IAAI,IAAI,sBAAsB,IAAI,OAAO,IAAI,IAAI,IAAI;AACvF,UAAM,WAAW,MAAM,KAAK,iBAAiB,GAAG;AAEhD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,kBAAkB,UAAU,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE;AAAA,IAC7E;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO;AAAA,QACL;AAAA,QACA,SAAS,IAAI;AAAA,QACb,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,SAAS,IAAI;AAAA,MACb,QAAQ;AAAA,MACR,UAAU;AAAA,IACZ;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,gBAAgB,KAAgD;AAC5E,UAAM,WAAW,MAAM,KAAK,iBAAiB,IAAI,GAAG;AAEpD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,kBAAkB,OAAO,IAAI,GAAG,EAAE;AAAA,IAC9C;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK;AAEpC,QAAI,IAAI,WAAW;AACjB,WAAK,uBAAuB,SAAS,IAAI,SAAS;AAClD,aAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,OAAO,UAAU,KAAK;AAAA,IACxE;AAEA,WAAO,EAAE,SAAS,SAAS,IAAI,SAAS,QAAQ,OAAO,UAAU,MAAM;AAAA,EACzE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,oBAAoB,WAAwB,WAAoC;AAC5F,UAAM,SAAS,MAAM,OAAO,OAAO,GAAG;AACtC,UAAM,MAAM,MAAM,MAAM,UAAU,SAAS;AAG3C,UAAM,aAAa,UAAU,MAAM,GAAG,EAAE,IAAI,KAAK;AACjD,UAAM,YAAY,GAAG,UAAU;AAE/B,UAAM,YAAY,IAAI,KAAK,SAAS;AACpC,QAAI,CAAC,WAAW;AAEd,YAAM,UAAU,IAAI,KAAK,UAAU;AACnC,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,kBAAkB,oCAAoC,SAAS,EAAE;AAAA,MAC7E;AACA,aAAO,QAAQ,MAAM,QAAQ;AAAA,IAC/B;AAEA,WAAO,UAAU,MAAM,QAAQ;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAAuB,SAAiB,WAAyB;AACvE,UAAM,eAAe,KAAK,YAAY,SAAS;AAC/C,UAAM,aAAa,KAAK,cAAc,OAAO;AAE7C,QAAI,eAAe,cAAc;AAC/B,YAAM,IAAI,mBAAmB,cAAc,UAAU;AAAA,IACvD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,WAA2B;AAC7C,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,aAAO,UAAU,MAAM,CAAC;AAAA,IAC1B;AACA,QAAI,UAAU,WAAW,SAAS,GAAG;AACnC,aAAO,UAAU,MAAM,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,iBAA2B;AAChC,UAAM,eAAe,QAAQ;AAC7B,UAAM,WAAW,QAAQ;AAEzB,QAAI;AACJ,YAAQ,cAAc;AAAA,MACpB,KAAK;AACH,aAAK;AACL;AAAA,MACF,KAAK;AACH,aAAK;AACL;AAAA,MACF,KAAK;AACH,aAAK;AACL;AAAA,MACF;AACE,aAAK;AAAA,IACT;AAEA,QAAI;AACJ,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,eAAO;AACP;AAAA,MACF,KAAK;AACH,eAAO;AACP;AAAA,MACF;AACE,eAAO;AAAA,IACX;AAEA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,SAAyB;AAC7C,WAAO,WAAW,QAAQ,EAAE,OAAO,SAAS,MAAM,EAAE,OAAO,KAAK;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,MAAoB;AAC7C,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAiB,KAAa,MAAuC;AACjF,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW,MAAM;AAAA,IACnB,GAAG,KAAK,OAAO;AAEf,UAAM,UAAkC;AAAA,MACtC,GAAI,MAAM;AAAA,IACZ;AACA,QAAI,KAAK,WAAW;AAClB,cAAQ,YAAY,IAAI,KAAK;AAAA,IAC/B;AAEA,QAAI;AACF,aAAO,MAAM,MAAM,KAAK;AAAA,QACtB,GAAG;AAAA,QACH;AAAA,QACA,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,SAAS,cAAc;AACzD,cAAM,IAAI,iBAAiB,yBAAyB,KAAK,OAAO,IAAI;AAAA,MACtE;AACA,YAAM,IAAI,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,IACrF,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AACF;","names":[]}

package/package.json

@@ -1,70 +1,73 @@
 {
   "name": "@nimblebrain/mpak-sdk",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "TypeScript SDK for mpak registry - MCPB bundles and Agent Skills",
+  "author": "NimbleBrain Inc <engineering@mpak.dev>",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NimbleBrainInc/mpak.git",
+    "directory": "packages/sdk-typescript"
+  },
+  "homepage": "https://mpak.dev",
+  "bugs": {
+    "url": "https://github.com/NimbleBrainInc/mpak/issues"
+  },
+  "keywords": [
+    "mpak",
+    "mcp",
+    "sdk",
+    "mcpb",
+    "model-context-protocol",
+    "agent-skills"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "type": "module",
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     }
   },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "files": [
     "dist",
-    "README.md",
-    "LICENSE"
+    "README.md"
   ],
   "sideEffects": false,
   "scripts": {
     "build": "tsup",
     "clean": "rm -rf dist coverage",
-    "typecheck": "tsc --noEmit",
-    "lint": "eslint src/",
-    "lint:fix": "eslint src/ --fix",
+    "dev": "tsup --watch",
+    "lint": "eslint src/ tests/",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:integration": "vitest run --config vitest.integration.config.ts",
-    "generate:types": "openapi-typescript https://api.mpak.dev/documentation/json -o src/schema.d.ts",
-    "verify": "npm run typecheck && npm run lint && npm run test",
-    "prepublishOnly": "npm run clean && npm run verify && npm run build"
+    "typecheck": "tsc --noEmit"
   },
   "engines": {
-    "node": ">=18.0.0"
-  },
-  "author": "NimbleBrain <support@nimblebrain.ai>",
-  "license": "Apache-2.0",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/NimbleBrainInc/mpak-sdk.git"
-  },
-  "keywords": [
-    "mpak",
-    "mcp",
-    "skills",
-    "agent",
-    "nimblebrain"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/"
+    "node": ">=22"
   },
   "dependencies": {
+    "@nimblebrain/mpak-schemas": "workspace:*",
     "jszip": "^3.10.1"
   },
   "devDependencies": {
-    "@eslint/js": "^9.18.0",
-    "@types/node": "^22.10.7",
-    "@vitest/coverage-v8": "^2.1.8",
-    "eslint": "^9.18.0",
-    "openapi-typescript": "^7.10.1",
-    "tsup": "^8.5.1",
-    "typescript": "^5.7.3",
-    "typescript-eslint": "^8.21.0",
-    "vitest": "^2.1.8"
+    "@types/node": "^22.0.0",
+    "tsup": "^8.4.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
   }
 }

package/LICENSE

@@ -1,190 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   Copyright 2026 NimbleBrain Inc.
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.