@sentry/warden 0.0.0 → 0.1.0

package/dist/cli/commands/init.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.test.js","sourceRoot":"","sources":["../../../src/cli/commands/init.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,SAAS,kBAAkB;IACzB,OAAO,IAAI,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,YAAiC,EAAE;IACxD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,KAAK;QACV,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,KAAK;QACV,OAAO,EAAE,KAAK;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,OAAe,CAAC;IACpB,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,gCAAgC;QAChC,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;YAE1D,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;YACpE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEzC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3F,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YACtD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,eAAe,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,wBAAwB;YACxB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAExF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEzC,kCAAkC;YAClC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACrF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC/G,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,wBAAwB;YACxB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAChE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAExF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAExD,+CAA+C;YAC/C,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;YACxE,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAEjD,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;YACnG,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAClD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,6BAA6B;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAEzB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAE1D,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC3B,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/commands/setup-app/browser.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Cross-platform browser opener.
+ */
+/**
+ * Open a URL in the default browser.
+ * Returns a promise that resolves when the browser open command has been executed.
+ */
+export declare function openBrowser(url: string): Promise<void>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/cli/commands/setup-app/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BtD"}

package/dist/cli/commands/setup-app/browser.js

@@ -0,0 +1,36 @@
+/**
+ * Cross-platform browser opener.
+ */
+import { exec } from 'node:child_process';
+import { platform } from 'node:os';
+/**
+ * Open a URL in the default browser.
+ * Returns a promise that resolves when the browser open command has been executed.
+ */
+export function openBrowser(url) {
+    return new Promise((resolve, reject) => {
+        const os = platform();
+        let command;
+        switch (os) {
+            case 'darwin':
+                command = `open "${url}"`;
+                break;
+            case 'win32':
+                command = `start "" "${url}"`;
+                break;
+            default:
+                // Linux and others
+                command = `xdg-open "${url}"`;
+                break;
+        }
+        exec(command, (error) => {
+            if (error) {
+                reject(error);
+            }
+            else {
+                resolve();
+            }
+        });
+    });
+}
+//# sourceMappingURL=browser.js.map

package/dist/cli/commands/setup-app/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,IAAI,OAAe,CAAC;QAEpB,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,QAAQ;gBACX,OAAO,GAAG,SAAS,GAAG,GAAG,CAAC;gBAC1B,MAAM;YACR,KAAK,OAAO;gBACV,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;gBAC9B,MAAM;YACR;gBACE,mBAAmB;gBACnB,OAAO,GAAG,aAAa,GAAG,GAAG,CAAC;gBAC9B,MAAM;QACV,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACtB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/commands/setup-app/credentials.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Exchange temporary code for GitHub App credentials via GitHub API.
+ */
+export interface AppCredentials {
+    id: number;
+    name: string;
+    pem: string;
+    htmlUrl: string;
+}
+/**
+ * Exchange a temporary code for GitHub App credentials.
+ * This uses the GitHub API to convert the code into full app credentials.
+ */
+export declare function exchangeCodeForCredentials(code: string): Promise<AppCredentials>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/cli/commands/setup-app/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/credentials.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA6BtF"}

package/dist/cli/commands/setup-app/credentials.js

@@ -0,0 +1,29 @@
+/**
+ * Exchange temporary code for GitHub App credentials via GitHub API.
+ */
+/**
+ * Exchange a temporary code for GitHub App credentials.
+ * This uses the GitHub API to convert the code into full app credentials.
+ */
+export async function exchangeCodeForCredentials(code) {
+    const url = `https://api.github.com/app-manifests/${code}/conversions`;
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            Accept: 'application/vnd.github+json',
+            'X-GitHub-Api-Version': '2022-11-28',
+        },
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Failed to exchange code for credentials: ${response.status} ${response.statusText}\n${errorText}`);
+    }
+    const data = (await response.json());
+    return {
+        id: data.id,
+        name: data.name,
+        pem: data.pem,
+        htmlUrl: data.html_url,
+    };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/cli/commands/setup-app/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/credentials.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,GAAG,GAAG,wCAAwC,IAAI,cAAc,CAAC;IAEvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;SACrC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4CAA4C,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC"}

package/dist/cli/commands/setup-app/manifest.d.ts

@@ -0,0 +1,24 @@
+/**
+ * GitHub App manifest builder for the setup-app flow.
+ */
+export interface ManifestOptions {
+    name?: string;
+    port: number;
+}
+export interface GitHubAppManifest {
+    name: string;
+    url: string;
+    hook_attributes: {
+        url: string;
+        active: boolean;
+    };
+    redirect_url: string;
+    public: boolean;
+    default_permissions: Record<string, string>;
+    default_events: string[];
+}
+/**
+ * Build a GitHub App manifest for Warden.
+ */
+export declare function buildManifest(options: ManifestOptions): GitHubAppManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/cli/commands/setup-app/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/manifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,CAsBzE"}

package/dist/cli/commands/setup-app/manifest.js

@@ -0,0 +1,29 @@
+/**
+ * GitHub App manifest builder for the setup-app flow.
+ */
+/**
+ * Build a GitHub App manifest for Warden.
+ */
+export function buildManifest(options) {
+    const name = options.name ?? 'Warden';
+    return {
+        name,
+        url: 'https://github.com/getsentry/warden',
+        hook_attributes: {
+            // URL is required by GitHub even when webhooks are disabled
+            url: 'https://example.com/webhook',
+            active: false,
+        },
+        redirect_url: `http://localhost:${options.port}/callback`,
+        public: false,
+        default_permissions: {
+            contents: 'read',
+            pull_requests: 'write',
+            issues: 'write',
+            checks: 'write',
+            metadata: 'read',
+        },
+        default_events: ['pull_request'],
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/cli/commands/setup-app/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/manifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoBH;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IAEtC,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,qCAAqC;QAC1C,eAAe,EAAE;YACf,4DAA4D;YAC5D,GAAG,EAAE,6BAA6B;YAClC,MAAM,EAAE,KAAK;SACd;QACD,YAAY,EAAE,oBAAoB,OAAO,CAAC,IAAI,WAAW;QACzD,MAAM,EAAE,KAAK;QACb,mBAAmB,EAAE;YACnB,QAAQ,EAAE,MAAM;YAChB,aAAa,EAAE,OAAO;YACtB,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,MAAM;SACjB;QACD,cAAc,EAAE,CAAC,cAAc,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/cli/commands/setup-app/server.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Local HTTP server for GitHub App manifest flow.
+ * Serves a form that POSTs the manifest to GitHub, then receives the callback.
+ */
+import { type Server } from 'node:http';
+import type { GitHubAppManifest } from './manifest.js';
+export interface CallbackResult {
+    code: string;
+}
+export interface ServerOptions {
+    port: number;
+    expectedState: string;
+    timeoutMs: number;
+    manifest: GitHubAppManifest;
+    org?: string;
+}
+/**
+ * Create and start a local HTTP server for the manifest flow.
+ * - GET / or /start: Serves the form that POSTs to GitHub
+ * - GET /callback: Receives the callback from GitHub with the code
+ */
+export declare function startCallbackServer(options: ServerOptions): {
+    server: Server;
+    waitForCallback: Promise<CallbackResult>;
+    close: () => void;
+    startUrl: string;
+};
+//# sourceMappingURL=server.d.ts.map

package/dist/cli/commands/setup-app/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwCD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAsGA"}

package/dist/cli/commands/setup-app/server.js

@@ -0,0 +1,136 @@
+/**
+ * Local HTTP server for GitHub App manifest flow.
+ * Serves a form that POSTs the manifest to GitHub, then receives the callback.
+ */
+import { createServer } from 'node:http';
+import { URL } from 'node:url';
+/**
+ * Build the HTML page that auto-submits the manifest form to GitHub.
+ */
+function buildStartPage(manifest, state, org) {
+    const githubUrl = org
+        ? `https://github.com/organizations/${org}/settings/apps/new?state=${state}`
+        : `https://github.com/settings/apps/new?state=${state}`;
+    const manifestJson = JSON.stringify(manifest);
+    return `<!DOCTYPE html>
+<html>
+<head>
+  <title>Creating GitHub App...</title>
+  <style>
+    body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; text-align: center; padding: 50px; }
+    .spinner { border: 4px solid #f3f3f3; border-top: 4px solid #3498db; border-radius: 50%; width: 40px; height: 40px; animation: spin 1s linear infinite; margin: 20px auto; }
+    @keyframes spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } }
+  </style>
+</head>
+<body>
+  <h1>Redirecting to GitHub...</h1>
+  <div class="spinner"></div>
+  <p>If you are not redirected automatically, click the button below.</p>
+  <form id="manifest-form" action="${githubUrl}" method="post">
+    <input type="hidden" name="manifest" value='${manifestJson.replace(/'/g, '&#39;')}'>
+    <button type="submit" style="padding: 10px 20px; font-size: 16px; cursor: pointer;">Continue to GitHub</button>
+  </form>
+  <script>
+    // Auto-submit the form after a brief delay
+    setTimeout(function() {
+      document.getElementById('manifest-form').submit();
+    }, 500);
+  </script>
+</body>
+</html>`;
+}
+/**
+ * Create and start a local HTTP server for the manifest flow.
+ * - GET / or /start: Serves the form that POSTs to GitHub
+ * - GET /callback: Receives the callback from GitHub with the code
+ */
+export function startCallbackServer(options) {
+    let resolveCallback;
+    let rejectCallback;
+    const waitForCallback = new Promise((resolve, reject) => {
+        resolveCallback = resolve;
+        rejectCallback = reject;
+    });
+    const server = createServer((req, res) => {
+        const url = new URL(req.url || '/', `http://localhost:${options.port}`);
+        // Serve the start page that auto-submits to GitHub
+        if (req.method === 'GET' && (url.pathname === '/' || url.pathname === '/start')) {
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(buildStartPage(options.manifest, options.expectedState, options.org));
+            return;
+        }
+        // Handle callback from GitHub
+        if (req.method === 'GET' && url.pathname === '/callback') {
+            const code = url.searchParams.get('code');
+            const state = url.searchParams.get('state');
+            // Validate state parameter (CSRF protection)
+            if (state !== options.expectedState) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(`
+          <!DOCTYPE html>
+          <html>
+          <head><title>Error</title></head>
+          <body>
+            <h1>Error: Invalid state parameter</h1>
+            <p>This may be a CSRF attack. Please try again.</p>
+          </body>
+          </html>
+        `);
+                rejectCallback(new Error('Invalid state parameter - possible CSRF attack'));
+                return;
+            }
+            if (!code) {
+                res.writeHead(400, { 'Content-Type': 'text/html' });
+                res.end(`
+          <!DOCTYPE html>
+          <html>
+          <head><title>Error</title></head>
+          <body>
+            <h1>Error: Missing code parameter</h1>
+            <p>GitHub did not provide the expected authorization code.</p>
+          </body>
+          </html>
+        `);
+                rejectCallback(new Error('Missing code parameter in callback'));
+                return;
+            }
+            // Success - send response and resolve promise
+            res.writeHead(200, { 'Content-Type': 'text/html' });
+            res.end(`
+        <!DOCTYPE html>
+        <html>
+        <head>
+          <title>Success</title>
+          <style>
+            body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; text-align: center; padding: 50px; }
+            h1 { color: #28a745; }
+          </style>
+        </head>
+        <body>
+          <h1>GitHub App Created!</h1>
+          <p>You can close this window and return to the terminal.</p>
+        </body>
+        </html>
+      `);
+            resolveCallback({ code });
+            return;
+        }
+        // 404 for anything else
+        res.writeHead(404);
+        res.end('Not found');
+    });
+    // Bind only to localhost for security
+    server.listen(options.port, '127.0.0.1');
+    // Set up timeout
+    const timeoutId = setTimeout(() => {
+        rejectCallback(new Error(`Timeout: No callback received within ${options.timeoutMs / 1000} seconds`));
+        server.close();
+    }, options.timeoutMs);
+    const close = () => {
+        clearTimeout(timeoutId);
+        server.close();
+    };
+    const startUrl = `http://localhost:${options.port}/start`;
+    return { server, waitForCallback, close, startUrl };
+}
+//# sourceMappingURL=server.js.map

package/dist/cli/commands/setup-app/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/cli/commands/setup-app/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAe/B;;GAEG;AACH,SAAS,cAAc,CAAC,QAA2B,EAAE,KAAa,EAAE,GAAY;IAC9E,MAAM,SAAS,GAAG,GAAG;QACnB,CAAC,CAAC,oCAAoC,GAAG,4BAA4B,KAAK,EAAE;QAC5E,CAAC,CAAC,8CAA8C,KAAK,EAAE,CAAC;IAE1D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE9C,OAAO;;;;;;;;;;;;;;qCAc4B,SAAS;kDACI,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;;;;;;;;;;QAU7E,CAAC;AACT,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IAMxD,IAAI,eAAiD,CAAC;IACtD,IAAI,cAAsC,CAAC;IAE3C,MAAM,eAAe,GAAG,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtE,eAAe,GAAG,OAAO,CAAC;QAC1B,cAAc,GAAG,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAExE,mDAAmD;QACnD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAE5C,6CAA6C;YAC7C,IAAI,KAAK,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;SASP,CAAC,CAAC;gBACH,cAAc,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;SASP,CAAC,CAAC;gBACH,cAAc,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YAED,8CAA8C;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;OAeP,CAAC,CAAC;YAEH,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,wBAAwB;QACxB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEzC,iBAAiB;IACjB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;QAChC,cAAc,CAAC,IAAI,KAAK,CAAC,wCAAwC,OAAO,CAAC,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;QACtG,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEtB,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,oBAAoB,OAAO,CAAC,IAAI,QAAQ,CAAC;IAE1D,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/cli/commands/setup-app.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Setup GitHub App command.
+ * Creates a GitHub App via the manifest flow for Warden to post as a custom bot.
+ */
+import type { SetupAppOptions } from '../args.js';
+import type { Reporter } from '../output/reporter.js';
+/**
+ * Run the setup-app command.
+ */
+export declare function runSetupApp(options: SetupAppOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=setup-app.d.ts.map

package/dist/cli/commands/setup-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-app.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/setup-app.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOtD;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAyI/F"}

package/dist/cli/commands/setup-app.js

@@ -0,0 +1,139 @@
+/**
+ * Setup GitHub App command.
+ * Creates a GitHub App via the manifest flow for Warden to post as a custom bot.
+ */
+import { randomBytes } from 'node:crypto';
+import chalk from 'chalk';
+import { getGitHubRepoUrl } from '../git.js';
+import { buildManifest } from './setup-app/manifest.js';
+import { startCallbackServer } from './setup-app/server.js';
+import { openBrowser } from './setup-app/browser.js';
+import { exchangeCodeForCredentials } from './setup-app/credentials.js';
+/**
+ * Run the setup-app command.
+ */
+export async function runSetupApp(options, reporter) {
+    const { port, timeout, org, name, open } = options;
+    reporter.bold('SETUP GITHUB APP');
+    reporter.blank();
+    // Generate state token for CSRF protection
+    const state = randomBytes(16).toString('hex');
+    // Build manifest
+    const manifest = buildManifest({ name, port });
+    // Show what permissions will be requested
+    reporter.text('This will create a GitHub App with the following permissions:');
+    reporter.text(`  ${chalk.dim('•')} contents: read        ${chalk.dim('- Read repository files')}`);
+    reporter.text(`  ${chalk.dim('•')} pull_requests: write  ${chalk.dim('- Post review comments')}`);
+    reporter.text(`  ${chalk.dim('•')} issues: write         ${chalk.dim('- Create/update issues')}`);
+    reporter.text(`  ${chalk.dim('•')} checks: write         ${chalk.dim('- Create check runs')}`);
+    reporter.text(`  ${chalk.dim('•')} metadata: read        ${chalk.dim('- Read repository metadata')}`);
+    reporter.blank();
+    // Start local server (serves the form and handles callback)
+    reporter.step(`Starting local server on http://localhost:${port}...`);
+    const serverHandle = startCallbackServer({
+        port,
+        expectedState: state,
+        timeoutMs: timeout * 1000,
+        manifest,
+        org,
+    });
+    // Handle server errors (e.g., port already in use)
+    serverHandle.server.on('error', (error) => {
+        if (error.code === 'EADDRINUSE') {
+            reporter.error(`Port ${port} is already in use. Try a different port with --port <number>`);
+        }
+        else {
+            reporter.error(`Server error: ${error.message}`);
+        }
+        process.exit(1);
+    });
+    try {
+        // Open browser to our local server (which will POST to GitHub)
+        if (open) {
+            reporter.step('Opening browser...');
+            try {
+                await openBrowser(serverHandle.startUrl);
+            }
+            catch {
+                reporter.warning('Could not open browser automatically.');
+                reporter.blank();
+                reporter.text('Open this URL in your browser:');
+                reporter.text(chalk.cyan(serverHandle.startUrl));
+            }
+        }
+        else {
+            reporter.blank();
+            reporter.text('Open this URL in your browser:');
+            reporter.text(chalk.cyan(serverHandle.startUrl));
+        }
+        reporter.blank();
+        reporter.text(`On the GitHub page, click ${chalk.cyan('"Create GitHub App"')} to continue.`);
+        reporter.blank();
+        reporter.text(chalk.dim('Waiting for GitHub callback... (Ctrl+C to cancel)'));
+        // Wait for callback
+        const { code } = await serverHandle.waitForCallback;
+        // Exchange code for credentials
+        reporter.blank();
+        reporter.step('Exchanging code for credentials...');
+        const credentials = await exchangeCodeForCredentials(code);
+        // Success!
+        reporter.blank();
+        reporter.success('GitHub App created!');
+        reporter.blank();
+        reporter.text(`  App ID:    ${chalk.cyan(credentials.id)}`);
+        reporter.text(`  App Name:  ${chalk.cyan(credentials.name)}`);
+        reporter.text(`  App URL:   ${chalk.cyan(credentials.htmlUrl)}`);
+        reporter.blank();
+        // Next steps - in correct order!
+        const githubRepoUrl = getGitHubRepoUrl(process.cwd());
+        reporter.bold('Next steps:');
+        reporter.blank();
+        // Step 1: Install the app (must happen first!)
+        reporter.text(`  ${chalk.cyan('1.')} Install the app on your repository:`);
+        reporter.text(`     ${chalk.cyan(credentials.htmlUrl + '/installations/new')}`);
+        reporter.blank();
+        // Step 2: Add secrets
+        reporter.text(`  ${chalk.cyan('2.')} Add these secrets to your repository:`);
+        if (githubRepoUrl) {
+            reporter.text(`     ${chalk.cyan(githubRepoUrl + '/settings/secrets/actions')}`);
+        }
+        reporter.blank();
+        reporter.text(`     ${chalk.white('WARDEN_APP_ID')}          ${credentials.id}`);
+        reporter.text(`     ${chalk.white('WARDEN_PRIVATE_KEY')}     ${chalk.dim('(copy the key below)')}`);
+        reporter.blank();
+        // Private key with clear instructions
+        reporter.text(`  ${chalk.cyan('Private Key')} ${chalk.dim('(copy entire block including BEGIN/END lines):')}`);
+        reporter.blank();
+        // Indent the private key for readability
+        const pemLines = credentials.pem.trim().split('\n');
+        for (const line of pemLines) {
+            reporter.text(`     ${chalk.dim(line)}`);
+        }
+        reporter.blank();
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        reporter.error(message);
+        reporter.blank();
+        // Provide recovery guidance if the app might have been created
+        const githubRepoUrl = getGitHubRepoUrl(process.cwd());
+        reporter.text(chalk.dim('If the GitHub App was created before this error:'));
+        reporter.text(chalk.dim('  1. Go to https://github.com/settings/apps' + (org ? ` (or your org's settings)` : '')));
+        reporter.text(chalk.dim('  2. Find your app and click "Edit"'));
+        reporter.text(chalk.dim('  3. Note the App ID from the "About" section'));
+        reporter.text(chalk.dim('  4. Scroll to "Private keys" and click "Generate a private key"'));
+        reporter.text(chalk.dim('  5. Install the app: click "Install App" in the sidebar'));
+        reporter.text(chalk.dim('  6. Add secrets to your repository:'));
+        if (githubRepoUrl) {
+            reporter.text(chalk.dim(`     ${githubRepoUrl}/settings/secrets/actions`));
+        }
+        reporter.text(chalk.dim('     - WARDEN_APP_ID: your App ID'));
+        reporter.text(chalk.dim('     - WARDEN_PRIVATE_KEY: contents of the downloaded .pem file'));
+        return 1;
+    }
+    finally {
+        serverHandle.close();
+    }
+}
+//# sourceMappingURL=setup-app.js.map

package/dist/cli/commands/setup-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-app.js","sourceRoot":"","sources":["../../../src/cli/commands/setup-app.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE,QAAkB;IAC5E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAEnD,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEjB,2CAA2C;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,iBAAiB;IACjB,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC/E,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;IACnG,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAClG,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAClG,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC/F,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACtG,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEjB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,6CAA6C,IAAI,KAAK,CAAC,CAAC;IAEtE,MAAM,YAAY,GAAG,mBAAmB,CAAC;QACvC,IAAI;QACJ,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,OAAO,GAAG,IAAI;QACzB,QAAQ;QACR,GAAG;KACJ,CAAC,CAAC;IAEH,mDAAmD;IACnD,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;QAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,+DAA+D,CAAC,CAAC;QAC9F,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,+DAA+D;QAC/D,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;gBAC1D,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnD,CAAC;QAED,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QAC7F,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;QAE9E,oBAAoB;QACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;QAEpD,gCAAgC;QAChC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAE3D,WAAW;QACX,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,iCAAiC;QACjC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,+CAA+C;QAC/C,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAChF,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,sBAAsB;QACtB,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC7E,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,aAAa,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACpG,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,sCAAsC;QACtC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;QAC/G,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,yCAAyC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,+DAA+D;QAC/D,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnH,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC,CAAC;QACrF,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACjE,IAAI,aAAa,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,aAAa,2BAA2B,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC,CAAC;QAE5F,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/cli/commands/sync.d.ts

@@ -0,0 +1,9 @@
+import type { Reporter } from '../output/reporter.js';
+import type { CLIOptions } from '../args.js';
+/**
+ * Run the sync command.
+ * Updates cached remote skills to their latest versions.
+ * Pinned skills (with @sha) are skipped as they're immutable.
+ */
+export declare function runSync(options: CLIOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/cli/commands/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/sync.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAmGtF"}

package/dist/cli/commands/sync.js

@@ -0,0 +1,96 @@
+import chalk from 'chalk';
+import { fetchRemote, listCachedRemotes, parseRemoteRef, } from '../../skills/remote.js';
+/**
+ * Run the sync command.
+ * Updates cached remote skills to their latest versions.
+ * Pinned skills (with @sha) are skipped as they're immutable.
+ */
+export async function runSync(options, reporter) {
+    const cachedRemotes = listCachedRemotes();
+    if (cachedRemotes.length === 0) {
+        reporter.warning('No remote skills cached.');
+        reporter.tip('Add remote skills with: warden add --remote owner/repo --skill name');
+        return 0;
+    }
+    // If a specific remote is provided, only sync that one
+    const targetRepo = options.remote;
+    const remotesToSync = targetRepo
+        ? cachedRemotes.filter(({ ref }) => ref === targetRepo || ref.startsWith(`${targetRepo}@`))
+        : cachedRemotes;
+    if (targetRepo && remotesToSync.length === 0) {
+        reporter.error(`Remote not found in cache: ${targetRepo}`);
+        reporter.blank();
+        reporter.text('Cached remotes:');
+        for (const { ref } of cachedRemotes) {
+            reporter.text(`  - ${ref}`);
+        }
+        return 1;
+    }
+    // Separate pinned and unpinned remotes
+    const unpinnedRemotes = remotesToSync.filter(({ ref }) => {
+        const parsed = parseRemoteRef(ref);
+        return !parsed.sha;
+    });
+    const pinnedRemotes = remotesToSync.filter(({ ref }) => {
+        const parsed = parseRemoteRef(ref);
+        return !!parsed.sha;
+    });
+    if (unpinnedRemotes.length === 0) {
+        if (pinnedRemotes.length > 0) {
+            reporter.warning('All cached remotes are pinned to specific versions.');
+            reporter.text('Pinned remotes do not need syncing as they are immutable.');
+            for (const { ref } of pinnedRemotes) {
+                reporter.text(`  - ${ref} ${chalk.dim('(pinned)')}`);
+            }
+        }
+        else {
+            reporter.warning('No remotes to sync.');
+        }
+        return 0;
+    }
+    reporter.bold('SYNC REMOTE SKILLS');
+    reporter.blank();
+    let updated = 0;
+    let errors = 0;
+    for (const { ref, entry } of unpinnedRemotes) {
+        reporter.step(`Syncing ${ref}...`);
+        const previousSha = entry.sha;
+        try {
+            const newSha = await fetchRemote(ref, { force: true });
+            if (newSha !== previousSha) {
+                reporter.success(`${ref}: updated ${chalk.dim(previousSha.slice(0, 7))} -> ${chalk.dim(newSha.slice(0, 7))}`);
+                updated++;
+            }
+            else {
+                reporter.text(`${ref}: ${chalk.dim('already up to date')}`);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            reporter.error(`${ref}: ${message}`);
+            errors++;
+        }
+    }
+    // Show pinned remotes that were skipped
+    if (pinnedRemotes.length > 0 && !targetRepo) {
+        reporter.blank();
+        reporter.text(chalk.dim('Skipped pinned remotes:'));
+        for (const { ref } of pinnedRemotes) {
+            reporter.text(chalk.dim(`  - ${ref}`));
+        }
+    }
+    // Summary
+    reporter.blank();
+    if (errors > 0) {
+        reporter.warning(`Synced with ${errors} error${errors === 1 ? '' : 's'}.`);
+        return 1;
+    }
+    if (updated > 0) {
+        reporter.success(`Updated ${updated} remote${updated === 1 ? '' : 's'}.`);
+    }
+    else {
+        reporter.success('All remotes up to date.');
+    }
+    return 0;
+}
+//# sourceMappingURL=sync.js.map