@sentry/warden 0.0.0 → 0.1.1

package/dist/action/159.index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"159.index.js","mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AAGA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AAWA;;;;;;;;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;;;;;;;AAOA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;AACA;AACA;AACA;AAEA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;;AAEA;AACA;AACA;AACA;AACA;AAEA;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;;;AAIA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;;AAEA;AACA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AAWA;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AAEA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAUA;;;AAGA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;;;AAGA;AACA;AACA;AACA;AAEA;AACA;AACA;AAAA;AAEA;AAEA;AACA;AAAA;AAEA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;;;AAGA;AACA;AAIA;AACA;AAEA;AACA;AACA;AACA;AAEA;AAAA;AAEA;AAEA;AACA;AAAA;AAEA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AAEA;;;;;AAKA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AAEA;;;;AAIA;AACA;AAKA;AAEA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AAEA;AAGA;AAEA;;AAEA;AACA;AACA;AAEA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AAEA;;AAEA;AACA;AACA;AACA;AACA","sources":[".././src/skills/remote.ts"],"sourcesContent":["import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync, renameSync, readdirSync, statSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\nimport { execFileSync } from 'node:child_process';\nimport { z } from 'zod';\nimport { loadSkillFromMarkdown, SkillLoaderError } from './loader.js';\nimport type { SkillDefinition } from '../config/schema.js';\n\n/** Default TTL for unpinned remote skills: 24 hours */\nconst DEFAULT_TTL_SECONDS = 86400;\n\n/** Schema for a single remote entry in state.json */\nconst RemoteEntrySchema = z.object({\n  sha: z.string(),\n  fetchedAt: z.string().datetime(),\n});\n\n/** Schema for the entire state.json file */\nconst RemoteStateSchema = z.object({\n  remotes: z.record(z.string(), RemoteEntrySchema),\n});\n\nexport type RemoteEntry = z.infer<typeof RemoteEntrySchema>;\nexport type RemoteState = z.infer<typeof RemoteStateSchema>;\n\n/** Schema for a plugin in marketplace.json */\nconst MarketplacePluginSchema = z.object({\n  name: z.string(),\n  source: z.string(),\n  description: z.string().optional(),\n  category: z.string().optional(),\n});\n\n/** Schema for .claude-plugin/marketplace.json */\nconst MarketplaceConfigSchema = z.object({\n  $schema: z.string().optional(),\n  name: z.string(),\n  description: z.string().optional(),\n  plugins: z.array(MarketplacePluginSchema),\n});\n\ntype MarketplaceConfig = z.infer<typeof MarketplaceConfigSchema>;\n\n/** Parsed remote reference */\nexport interface ParsedRemoteRef {\n  owner: string;\n  repo: string;\n  sha?: string;\n}\n\n/**\n * Normalize a GitHub URL to owner/repo format.\n * Returns null if the input is not a recognized GitHub URL.\n *\n * Supports:\n * - https://github.com/owner/repo\n * - https://github.com/owner/repo.git\n * - git@github.com:owner/repo.git\n */\nfunction normalizeGitHubUrl(input: string): string | null {\n  // HTTPS URL: https://github.com/owner/repo or https://github.com/owner/repo.git\n  const httpsMatch = input.match(/^https?:\\/\\/github\\.com\\/([^/]+)\\/([^/@]+?)(?:\\.git)?$/);\n  if (httpsMatch) {\n    return `${httpsMatch[1]}/${httpsMatch[2]}`;\n  }\n\n  // SSH URL: git@github.com:owner/repo.git\n  const sshMatch = input.match(/^git@github\\.com:([^/]+)\\/([^/@]+?)(?:\\.git)?$/);\n  if (sshMatch) {\n    return `${sshMatch[1]}/${sshMatch[2]}`;\n  }\n\n  return null;\n}\n\n/**\n * Parse a remote reference string into its components.\n * Supports formats:\n * - \"owner/repo\" or \"owner/repo@sha\"\n * - \"https://github.com/owner/repo\" or \"https://github.com/owner/repo@sha\"\n * - \"https://github.com/owner/repo.git\" or \"https://github.com/owner/repo.git@sha\"\n * - \"git@github.com:owner/repo.git\" or \"git@github.com:owner/repo.git@sha\"\n */\nexport function parseRemoteRef(ref: string): ParsedRemoteRef {\n  let inputRef = ref;\n  let sha: string | undefined;\n\n  // Extract SHA suffix from the input before URL normalization.\n  // The SHA is always at the end, after a @ that follows the repo name.\n  // For git@github.com URLs, we need to find the @ after the colon.\n  if (ref.startsWith('git@')) {\n    const colonIndex = ref.indexOf(':');\n    if (colonIndex !== -1) {\n      const afterColon = ref.slice(colonIndex + 1);\n      const shaAtIndex = afterColon.lastIndexOf('@');\n      if (shaAtIndex !== -1) {\n        sha = afterColon.slice(shaAtIndex + 1);\n        inputRef = ref.slice(0, colonIndex + 1 + shaAtIndex);\n      }\n    }\n  } else {\n    const lastAtIndex = ref.lastIndexOf('@');\n    if (lastAtIndex !== -1) {\n      const potentialSha = ref.slice(lastAtIndex + 1);\n      // SHA should not contain : or / (those would indicate URL structure)\n      if (!potentialSha.includes(':') && !potentialSha.includes('/')) {\n        if (!potentialSha) {\n          throw new SkillLoaderError(`Invalid remote ref: ${ref} (empty SHA after @)`);\n        }\n        sha = potentialSha;\n        inputRef = ref.slice(0, lastAtIndex);\n      }\n    }\n  }\n\n  // Normalize GitHub URLs to owner/repo format\n  const repoPath = normalizeGitHubUrl(inputRef) ?? inputRef;\n\n  const slashIndex = repoPath.indexOf('/');\n  if (slashIndex === -1) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (expected owner/repo format)`);\n  }\n\n  const owner = repoPath.slice(0, slashIndex);\n  const repo = repoPath.slice(slashIndex + 1);\n\n  if (!owner || !repo) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (empty owner or repo)`);\n  }\n\n  if (repo.includes('/')) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (repo name cannot contain /)`);\n  }\n\n  // Security: Prevent git flag injection by rejecting values starting with '-'\n  if (owner.startsWith('-')) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (owner cannot start with -)`);\n  }\n  if (repo.startsWith('-')) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (repo cannot start with -)`);\n  }\n  if (sha?.startsWith('-')) {\n    throw new SkillLoaderError(`Invalid remote ref: ${ref} (SHA cannot start with -)`);\n  }\n\n  return { owner, repo, sha };\n}\n\n/**\n * Format a parsed remote ref back to string format.\n */\nexport function formatRemoteRef(parsed: ParsedRemoteRef): string {\n  const base = `${parsed.owner}/${parsed.repo}`;\n  return parsed.sha ? `${base}@${parsed.sha}` : base;\n}\n\n/**\n * Get the base directory for caching remote skills.\n * Respects WARDEN_STATE_DIR environment variable.\n * Default: ~/.local/warden/skills/\n */\nexport function getSkillsCacheDir(): string {\n  const stateDir = process.env['WARDEN_STATE_DIR'];\n  if (stateDir) {\n    return join(stateDir, 'skills');\n  }\n  return join(homedir(), '.local', 'warden', 'skills');\n}\n\n/**\n * Get the cache path for a specific remote ref.\n * - Unpinned: ~/.local/warden/skills/owner/repo/\n * - Pinned: ~/.local/warden/skills/owner/repo@sha/\n */\nexport function getRemotePath(ref: string): string {\n  const parsed = parseRemoteRef(ref);\n  const cacheDir = getSkillsCacheDir();\n\n  if (parsed.sha) {\n    return join(cacheDir, parsed.owner, `${parsed.repo}@${parsed.sha}`);\n  }\n  return join(cacheDir, parsed.owner, parsed.repo);\n}\n\n/**\n * Get the path to the state.json file.\n */\nexport function getStatePath(): string {\n  return join(getSkillsCacheDir(), 'state.json');\n}\n\n/**\n * Load the remote state from state.json.\n * Returns an empty state if the file doesn't exist.\n */\nexport function loadState(): RemoteState {\n  const statePath = getStatePath();\n\n  if (!existsSync(statePath)) {\n    return { remotes: {} };\n  }\n\n  try {\n    const content = readFileSync(statePath, 'utf-8');\n    const data = JSON.parse(content);\n    return RemoteStateSchema.parse(data);\n  } catch (error) {\n    // If state is corrupted, start fresh\n    const message = error instanceof Error ? error.message : String(error);\n    console.warn(`Warning: Failed to load state.json, starting fresh: ${message}`);\n    return { remotes: {} };\n  }\n}\n\n/**\n * Save the remote state to state.json.\n * Uses atomic write (write to temp, then rename).\n */\nexport function saveState(state: RemoteState): void {\n  const statePath = getStatePath();\n  const stateDir = dirname(statePath);\n\n  // Ensure directory exists\n  if (!existsSync(stateDir)) {\n    mkdirSync(stateDir, { recursive: true });\n  }\n\n  // Write atomically\n  const tempPath = `${statePath}.tmp`;\n  writeFileSync(tempPath, JSON.stringify(state, null, 2), 'utf-8');\n\n  // Rename is atomic on most filesystems\n  renameSync(tempPath, statePath);\n}\n\n/**\n * Get the TTL for remote skill cache in seconds.\n * Respects WARDEN_SKILL_CACHE_TTL environment variable.\n */\nexport function getCacheTtlSeconds(): number {\n  const envTtl = process.env['WARDEN_SKILL_CACHE_TTL'];\n  if (envTtl) {\n    const parsed = parseInt(envTtl, 10);\n    if (!isNaN(parsed) && parsed > 0) {\n      return parsed;\n    }\n  }\n  return DEFAULT_TTL_SECONDS;\n}\n\n/**\n * Check if an unpinned remote ref needs to be refreshed.\n * Pinned refs (with @sha) never need refresh.\n */\nexport function shouldRefresh(ref: string, state: RemoteState): boolean {\n  const parsed = parseRemoteRef(ref);\n\n  // Pinned refs are immutable - never refresh\n  if (parsed.sha) {\n    return false;\n  }\n\n  const entry = state.remotes[ref];\n  if (!entry) {\n    return true; // Not cached, needs fetch\n  }\n\n  const fetchedAt = new Date(entry.fetchedAt).getTime();\n  const now = Date.now();\n  const ttl = getCacheTtlSeconds() * 1000;\n\n  return now - fetchedAt > ttl;\n}\n\nexport interface FetchRemoteOptions {\n  /** Force refresh even if cache is valid */\n  force?: boolean;\n  /** Skip network operations - only use cache */\n  offline?: boolean;\n  /** Callback for progress messages */\n  onProgress?: (message: string) => void;\n}\n\n/**\n * Execute a git command and return stdout.\n * Uses execFileSync to avoid shell injection vulnerabilities.\n * Throws SkillLoaderError on failure.\n */\nfunction execGit(args: string[], options?: { cwd?: string }): string {\n  try {\n    return execFileSync('git', args, {\n      encoding: 'utf-8',\n      cwd: options?.cwd,\n      stdio: ['pipe', 'pipe', 'pipe'],\n    }).trim();\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    throw new SkillLoaderError(`Git command failed: git ${args.join(' ')}: ${message}`);\n  }\n}\n\n/**\n * Clone or update a remote repository to the cache.\n * Returns the SHA of the fetched commit.\n */\nexport async function fetchRemote(ref: string, options: FetchRemoteOptions = {}): Promise<string> {\n  const { force = false, offline = false, onProgress } = options;\n  const parsed = parseRemoteRef(ref);\n  const remotePath = getRemotePath(ref);\n  const state = loadState();\n\n  const isPinned = !!parsed.sha;\n  const isCached = existsSync(remotePath);\n  const needsRefresh = shouldRefresh(ref, state);\n\n  // Check if we have a valid cache (directory exists AND state entry exists)\n  const stateEntry = state.remotes[ref];\n  const hasValidCache = isCached && !!stateEntry;\n\n  // Handle offline mode\n  if (offline) {\n    if (hasValidCache) {\n      return stateEntry.sha;\n    }\n    throw new SkillLoaderError(`Remote skill not cached and offline mode enabled: ${ref}`);\n  }\n\n  // Pinned + valid cache = use cache (SHA is immutable)\n  if (isPinned && hasValidCache && !force && parsed.sha) {\n    return parsed.sha;\n  }\n\n  // Unpinned + valid cache + fresh = use cache\n  if (!isPinned && hasValidCache && !needsRefresh && !force) {\n    return stateEntry.sha;\n  }\n\n  const repoUrl = `https://github.com/${parsed.owner}/${parsed.repo}.git`;\n\n  // Clone or update\n  if (!isCached) {\n    onProgress?.(`Cloning ${ref}...`);\n\n    // Ensure parent directory exists\n    const parentDir = dirname(remotePath);\n    if (!existsSync(parentDir)) {\n      mkdirSync(parentDir, { recursive: true });\n    }\n\n    // Clone with minimal depth for unpinned refs\n    // Note: '--' separates flags from positional args to prevent flag injection\n    if (isPinned && parsed.sha) {\n      // For pinned refs, we need full history to checkout the specific SHA\n      // Use a shallow clone then deepen if needed\n      execGit(['clone', '--depth=1', '--', repoUrl, remotePath]);\n\n      try {\n        // Try to checkout the pinned SHA\n        // Note: 'checkout' without '--' treats arg as ref; with '--' it's a file path\n        execGit(['fetch', '--depth=1', 'origin', '--', parsed.sha], { cwd: remotePath });\n        execGit(['checkout', parsed.sha], { cwd: remotePath });\n      } catch {\n        // If SHA not found, do a full fetch and retry\n        execGit(['fetch', '--unshallow'], { cwd: remotePath });\n        execGit(['checkout', parsed.sha], { cwd: remotePath });\n      }\n    } else if (!isPinned) {\n      // For unpinned refs, shallow clone of default branch\n      execGit(['clone', '--depth=1', '--', repoUrl, remotePath]);\n    }\n  } else {\n    // Update existing cache\n    onProgress?.(`Updating ${ref}...`);\n\n    if (!isPinned) {\n      // For unpinned refs, pull latest\n      execGit(['fetch', '--depth=1', 'origin'], { cwd: remotePath });\n      execGit(['reset', '--hard', 'origin/HEAD'], { cwd: remotePath });\n    }\n    // Pinned refs don't need updates - SHA is immutable\n  }\n\n  // Get the current HEAD SHA\n  const sha = execGit(['rev-parse', 'HEAD'], { cwd: remotePath });\n\n  // Update state\n  state.remotes[ref] = {\n    sha,\n    fetchedAt: new Date().toISOString(),\n  };\n  saveState(state);\n\n  return sha;\n}\n\nexport interface DiscoveredRemoteSkill {\n  name: string;\n  description: string;\n  path: string;\n  /** Plugin name for marketplace format skills */\n  pluginName?: string;\n}\n\n/**\n * Parse marketplace.json from a remote repository if it exists.\n * Returns null if the file doesn't exist or is invalid.\n */\nfunction parseMarketplaceConfig(remotePath: string): MarketplaceConfig | null {\n  const marketplacePath = join(remotePath, '.claude-plugin', 'marketplace.json');\n\n  if (!existsSync(marketplacePath)) {\n    return null;\n  }\n\n  try {\n    const content = readFileSync(marketplacePath, 'utf-8');\n    const data = JSON.parse(content);\n    return MarketplaceConfigSchema.parse(data);\n  } catch {\n    // Invalid or malformed marketplace.json - fall back to traditional discovery\n    return null;\n  }\n}\n\n/** Directories to search for skills in remote repositories */\nconst REMOTE_SKILL_DIRECTORIES = [\n  '',               // root level\n  'skills',         // skills/ subdirectory\n  '.warden/skills', // Warden-specific\n  '.agents/skills', // General agent skills\n  '.claude/skills', // Claude Code skills\n];\n\n/**\n * Discover skills using traditional directory layout.\n * Searches root level, skills/, and conventional skill directories.\n */\nasync function discoverTraditionalSkills(remotePath: string): Promise<DiscoveredRemoteSkill[]> {\n  const skills: DiscoveredRemoteSkill[] = [];\n  const seenNames = new Set<string>();\n\n  for (const subdir of REMOTE_SKILL_DIRECTORIES) {\n    const searchPath = subdir ? join(remotePath, subdir) : remotePath;\n    if (!existsSync(searchPath)) continue;\n\n    const entries = readdirSync(searchPath);\n\n    for (const entry of entries) {\n      if (entry.startsWith('.')) continue;\n\n      const entryPath = join(searchPath, entry);\n      const stat = statSync(entryPath);\n\n      if (stat.isDirectory()) {\n        const skillMdPath = join(entryPath, 'SKILL.md');\n        if (existsSync(skillMdPath)) {\n          try {\n            const skill = await loadSkillFromMarkdown(skillMdPath);\n            // First occurrence wins (root takes precedence over skills/)\n            if (!seenNames.has(skill.name)) {\n              seenNames.add(skill.name);\n              skills.push({\n                name: skill.name,\n                description: skill.description,\n                path: entryPath,\n              });\n            }\n          } catch {\n            // Skip invalid skill directories\n          }\n        }\n      }\n    }\n  }\n\n  return skills;\n}\n\n/**\n * Discover skills using marketplace format.\n * Searches plugins/{plugin}/skills/ for each plugin defined in marketplace.json.\n */\nasync function discoverMarketplaceSkills(\n  remotePath: string,\n  config: MarketplaceConfig\n): Promise<DiscoveredRemoteSkill[]> {\n  const skills: DiscoveredRemoteSkill[] = [];\n  const seenNames = new Set<string>();\n\n  for (const plugin of config.plugins) {\n    // Resolve plugin source path (e.g., \"./plugins/sentry-skills\" -> \"plugins/sentry-skills\")\n    const pluginSource = plugin.source.replace(/^\\.\\//, '');\n    const skillsPath = join(remotePath, pluginSource, 'skills');\n\n    if (!existsSync(skillsPath)) continue;\n\n    const entries = readdirSync(skillsPath);\n\n    for (const entry of entries) {\n      if (entry.startsWith('.')) continue;\n\n      const entryPath = join(skillsPath, entry);\n      const stat = statSync(entryPath);\n\n      if (stat.isDirectory()) {\n        const skillMdPath = join(entryPath, 'SKILL.md');\n        if (existsSync(skillMdPath)) {\n          try {\n            const skill = await loadSkillFromMarkdown(skillMdPath);\n            // First plugin wins for duplicate skill names\n            if (!seenNames.has(skill.name)) {\n              seenNames.add(skill.name);\n              skills.push({\n                name: skill.name,\n                description: skill.description,\n                path: entryPath,\n                pluginName: plugin.name,\n              });\n            }\n          } catch {\n            // Skip invalid skill directories\n          }\n        }\n      }\n    }\n  }\n\n  return skills;\n}\n\n/**\n * Discover all skills in a cached remote repository.\n * Detects format and delegates to appropriate discovery function:\n * - If .claude-plugin/marketplace.json exists, uses marketplace discovery\n * - Otherwise, uses traditional discovery (root, skills/, .warden/skills, etc.)\n */\nexport async function discoverRemoteSkills(ref: string): Promise<DiscoveredRemoteSkill[]> {\n  const remotePath = getRemotePath(ref);\n\n  if (!existsSync(remotePath)) {\n    throw new SkillLoaderError(`Remote not cached: ${ref}. Run fetch first.`);\n  }\n\n  // Check for marketplace format\n  const marketplaceConfig = parseMarketplaceConfig(remotePath);\n  if (marketplaceConfig) {\n    return discoverMarketplaceSkills(remotePath, marketplaceConfig);\n  }\n\n  // Fall back to traditional discovery\n  return discoverTraditionalSkills(remotePath);\n}\n\n/**\n * Resolve a skill from a remote repository.\n * Ensures the remote is fetched/cached, then loads the skill.\n * Matches by skill name (from SKILL.md), not directory name.\n */\nexport async function resolveRemoteSkill(\n  ref: string,\n  skillName: string,\n  options: FetchRemoteOptions = {}\n): Promise<SkillDefinition> {\n  await fetchRemote(ref, options);\n\n  const availableSkills = await discoverRemoteSkills(ref);\n  const match = availableSkills.find((s) => s.name === skillName);\n\n  if (match) {\n    return loadSkillFromMarkdown(join(match.path, 'SKILL.md'));\n  }\n\n  if (availableSkills.length === 0) {\n    throw new SkillLoaderError(`No skills found in remote: ${ref}`);\n  }\n\n  throw new SkillLoaderError(\n    `Skill '${skillName}' not found in remote: ${ref}. Available skills: ${availableSkills.map((s) => s.name).join(', ')}`\n  );\n}\n\n/**\n * Remove a remote from the cache.\n */\nexport function removeRemote(ref: string): void {\n  const remotePath = getRemotePath(ref);\n\n  if (existsSync(remotePath)) {\n    rmSync(remotePath, { recursive: true, force: true });\n  }\n\n  const state = loadState();\n  const { [ref]: _removed, ...remainingRemotes } = state.remotes;\n  state.remotes = remainingRemotes;\n  saveState(state);\n}\n\n/**\n * List all cached remotes with their metadata.\n */\nexport function listCachedRemotes(): { ref: string; entry: RemoteEntry }[] {\n  const state = loadState();\n  return Object.entries(state.remotes).map(([ref, entry]) => ({ ref, entry }));\n}\n"],"names":[],"sourceRoot":""}

package/dist/action/action/index.d.ts

@@ -0,0 +1,2 @@
+export * from './main.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/action/action/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/action/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}

package/dist/action/action/main.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/action/action/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/action/main.ts"],"names":[],"mappings":""}

package/dist/action/cli/args.d.ts

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+export declare const CLIOptionsSchema: z.ZodObject<{
+    targets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    skill: z.ZodOptional<z.ZodString>;
+    config: z.ZodOptional<z.ZodString>;
+    json: z.ZodDefault<z.ZodBoolean>;
+    output: z.ZodOptional<z.ZodString>;
+    failOn: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        medium: "medium";
+        low: "low";
+        info: "info";
+        off: "off";
+    }>>;
+    commentOn: z.ZodOptional<z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        medium: "medium";
+        low: "low";
+        info: "info";
+        off: "off";
+    }>>;
+    help: z.ZodDefault<z.ZodBoolean>;
+    parallel: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodOptional<z.ZodString>;
+    quiet: z.ZodDefault<z.ZodBoolean>;
+    verbose: z.ZodDefault<z.ZodNumber>;
+    color: z.ZodOptional<z.ZodBoolean>;
+    fix: z.ZodDefault<z.ZodBoolean>;
+    force: z.ZodDefault<z.ZodBoolean>;
+    list: z.ZodDefault<z.ZodBoolean>;
+    git: z.ZodDefault<z.ZodBoolean>;
+    remote: z.ZodOptional<z.ZodString>;
+    offline: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type CLIOptions = z.infer<typeof CLIOptionsSchema>;
+export interface SetupAppOptions {
+    org?: string;
+    port: number;
+    timeout: number;
+    name?: string;
+    open: boolean;
+}
+export interface ParsedArgs {
+    command: 'run' | 'help' | 'init' | 'add' | 'version' | 'setup-app' | 'sync';
+    options: CLIOptions;
+    setupAppOptions?: SetupAppOptions;
+}
+export declare function showVersion(): void;
+export declare function showHelp(): void;
+export interface DetectTargetTypeOptions {
+    /** Current working directory for filesystem checks */
+    cwd?: string;
+    /** Force git ref interpretation for ambiguous targets */
+    forceGit?: boolean;
+}
+/**
+ * Detect if a target looks like a git ref vs a file path.
+ * Returns 'git' for git refs, 'file' for file paths.
+ *
+ * For ambiguous targets (no path separators, no extension), checks
+ * if a file/directory exists at that path before defaulting to git ref.
+ */
+export declare function detectTargetType(target: string, options?: DetectTargetTypeOptions): 'git' | 'file';
+/**
+ * Classify targets into git refs and file patterns.
+ */
+export declare function classifyTargets(targets: string[], options?: DetectTargetTypeOptions): {
+    gitRefs: string[];
+    filePatterns: string[];
+};
+export declare function parseCliArgs(argv?: string[]): ParsedArgs;
+//# sourceMappingURL=args.d.ts.map

package/dist/action/cli/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/args.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+B3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;IAC5E,OAAO,EAAE,UAAU,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,wBAAgB,WAAW,IAAI,IAAI,CAElC;AAmFD,wBAAgB,QAAQ,IAAI,IAAI,CAE/B;AAED,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,uBAA4B,GAAG,KAAK,GAAG,MAAM,CA0CtG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,uBAA4B,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAavI;AAgBD,wBAAgB,YAAY,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,UAAU,CAkL/E"}

package/dist/action/cli/args.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=args.test.d.ts.map

package/dist/action/cli/args.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.test.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/args.test.ts"],"names":[],"mappings":""}

package/dist/action/cli/commands/add.d.ts

@@ -0,0 +1,7 @@
+import type { Reporter } from '../output/reporter.js';
+import type { CLIOptions } from '../args.js';
+/**
+ * Run the add command.
+ */
+export declare function runAdd(options: CLIOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=add.d.ts.map

package/dist/action/cli/commands/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/add.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAoT7C;;GAEG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAwHrF"}

package/dist/action/cli/commands/init.d.ts

@@ -0,0 +1,10 @@
+import type { Reporter } from '../output/reporter.js';
+import type { CLIOptions } from '../args.js';
+export interface InitOptions {
+    force: boolean;
+}
+/**
+ * Run the init command to scaffold warden configuration.
+ */
+export declare function runInit(options: CLIOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=init.d.ts.map

package/dist/action/cli/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/init.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAsD7C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAmEtF"}

package/dist/action/cli/commands/init.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=init.test.d.ts.map

package/dist/action/cli/commands/init.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.test.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/init.test.ts"],"names":[],"mappings":""}

package/dist/action/cli/commands/setup-app/browser.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Cross-platform browser opener.
+ */
+/**
+ * Open a URL in the default browser.
+ * Returns a promise that resolves when the browser open command has been executed.
+ */
+export declare function openBrowser(url: string): Promise<void>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/action/cli/commands/setup-app/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/setup-app/browser.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BtD"}

package/dist/action/cli/commands/setup-app/credentials.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Exchange temporary code for GitHub App credentials via GitHub API.
+ */
+export interface AppCredentials {
+    id: number;
+    name: string;
+    pem: string;
+    htmlUrl: string;
+}
+/**
+ * Exchange a temporary code for GitHub App credentials.
+ * This uses the GitHub API to convert the code into full app credentials.
+ */
+export declare function exchangeCodeForCredentials(code: string): Promise<AppCredentials>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/action/cli/commands/setup-app/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/setup-app/credentials.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA6BtF"}

package/dist/action/cli/commands/setup-app/manifest.d.ts

@@ -0,0 +1,24 @@
+/**
+ * GitHub App manifest builder for the setup-app flow.
+ */
+export interface ManifestOptions {
+    name?: string;
+    port: number;
+}
+export interface GitHubAppManifest {
+    name: string;
+    url: string;
+    hook_attributes: {
+        url: string;
+        active: boolean;
+    };
+    redirect_url: string;
+    public: boolean;
+    default_permissions: Record<string, string>;
+    default_events: string[];
+}
+/**
+ * Build a GitHub App manifest for Warden.
+ */
+export declare function buildManifest(options: ManifestOptions): GitHubAppManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/action/cli/commands/setup-app/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/setup-app/manifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,iBAAiB,CAsBzE"}

package/dist/action/cli/commands/setup-app/server.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Local HTTP server for GitHub App manifest flow.
+ * Serves a form that POSTs the manifest to GitHub, then receives the callback.
+ */
+import { type Server } from 'node:http';
+import type { GitHubAppManifest } from './manifest.js';
+export interface CallbackResult {
+    code: string;
+}
+export interface ServerOptions {
+    port: number;
+    expectedState: string;
+    timeoutMs: number;
+    manifest: GitHubAppManifest;
+    org?: string;
+}
+/**
+ * Create and start a local HTTP server for the manifest flow.
+ * - GET / or /start: Serves the form that POSTs to GitHub
+ * - GET /callback: Receives the callback from GitHub with the code
+ */
+export declare function startCallbackServer(options: ServerOptions): {
+    server: Server;
+    waitForCallback: Promise<CallbackResult>;
+    close: () => void;
+    startUrl: string;
+};
+//# sourceMappingURL=server.d.ts.map

package/dist/action/cli/commands/setup-app/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/setup-app/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAC;AAEjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwCD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAsGA"}

package/dist/action/cli/commands/setup-app.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Setup GitHub App command.
+ * Creates a GitHub App via the manifest flow for Warden to post as a custom bot.
+ */
+import type { SetupAppOptions } from '../args.js';
+import type { Reporter } from '../output/reporter.js';
+/**
+ * Run the setup-app command.
+ */
+export declare function runSetupApp(options: SetupAppOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=setup-app.d.ts.map

package/dist/action/cli/commands/setup-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-app.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/setup-app.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOtD;;GAEG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAyI/F"}

package/dist/action/cli/commands/sync.d.ts

@@ -0,0 +1,9 @@
+import type { Reporter } from '../output/reporter.js';
+import type { CLIOptions } from '../args.js';
+/**
+ * Run the sync command.
+ * Updates cached remote skills to their latest versions.
+ * Pinned skills (with @sha) are skipped as they're immutable.
+ */
+export declare function runSync(options: CLIOptions, reporter: Reporter): Promise<number>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/action/cli/commands/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/commands/sync.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAmGtF"}

package/dist/action/cli/context.d.ts

@@ -0,0 +1,27 @@
+import type { EventContext } from '../types/index.js';
+export interface LocalContextOptions {
+    base?: string;
+    head?: string;
+    cwd?: string;
+    /** Override auto-detected default branch (from config) */
+    defaultBranch?: string;
+}
+/**
+ * Build an EventContext from local git repository state.
+ * Creates a synthetic pull_request event from git diff.
+ *
+ * When analyzing a specific commit (head is set), uses the actual commit
+ * message as title/body to provide intent context to the LLM.
+ */
+export declare function buildLocalEventContext(options?: LocalContextOptions): EventContext;
+export interface FileContextOptions {
+    patterns: string[];
+    cwd?: string;
+}
+/**
+ * Build an EventContext from a list of files or glob patterns.
+ * Creates a synthetic pull_request event treating files as newly added.
+ * This allows analysis without requiring git or a warden.toml config.
+ */
+export declare function buildFileEventContext(options: FileContextOptions): Promise<EventContext>;
+//# sourceMappingURL=context.d.ts.map

package/dist/action/cli/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/context.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,mBAAmB,CAAC;AA4BlE,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,mBAAwB,GAAG,YAAY,CA+CtF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CA2B9F"}

package/dist/action/cli/files.d.ts

@@ -0,0 +1,22 @@
+import type { FileChange } from '../types/index.js';
+/**
+ * Expand glob patterns to a list of file paths.
+ */
+export declare function expandFileGlobs(patterns: string[], cwd?: string): Promise<string[]>;
+/**
+ * Create a unified diff patch for a file, treating entire content as added.
+ */
+export declare function createPatchFromContent(content: string): string;
+/**
+ * Read a file and create a synthetic FileChange treating it as newly added.
+ */
+export declare function createSyntheticFileChange(absolutePath: string, basePath: string): FileChange;
+/**
+ * Process a list of file paths into FileChange objects.
+ */
+export declare function createSyntheticFileChanges(absolutePaths: string[], basePath: string): FileChange[];
+/**
+ * Expand glob patterns and create FileChange objects for all matching files.
+ */
+export declare function expandAndCreateFileChanges(patterns: string[], cwd?: string): Promise<FileChange[]>;
+//# sourceMappingURL=files.d.ts.map

package/dist/action/cli/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/files.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;GAEG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAAE,EAClB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,EAAE,CAAC,CASnB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiB9D;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GACf,UAAU,CAeZ;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,EAAE,EACvB,QAAQ,EAAE,MAAM,GACf,UAAU,EAAE,CAEd;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAAE,EAClB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC,CAIvB"}

package/dist/action/cli/files.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=files.test.d.ts.map

package/dist/action/cli/files.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.test.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/files.test.ts"],"names":[],"mappings":""}

package/dist/action/cli/fix.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Fix application functionality for the warden CLI.
+ */
+import type { Finding, SkillReport } from '../types/index.js';
+import { type Reporter } from './output/index.js';
+export interface FixResult {
+    success: boolean;
+    finding: Finding;
+    error?: string;
+}
+export interface FixSummary {
+    applied: number;
+    skipped: number;
+    failed: number;
+    results: FixResult[];
+}
+/**
+ * Apply a unified diff to a file.
+ * Hunks are applied in reverse order by line number to prevent line shift issues.
+ */
+export declare function applyUnifiedDiff(filePath: string, diff: string): void;
+/**
+ * Collect all fixable findings from skill reports.
+ * A finding is fixable if it has both a suggestedFix.diff and a location.path.
+ * Findings are sorted by file, then by line number (descending).
+ */
+export declare function collectFixableFindings(reports: SkillReport[]): Finding[];
+/**
+ * Apply all fixes without prompting.
+ */
+export declare function applyAllFixes(findings: Finding[]): FixSummary;
+/**
+ * Run the interactive fix flow.
+ * Displays each fix with a colored diff and prompts the user.
+ */
+export declare function runInteractiveFixFlow(findings: Finding[], reporter: Reporter): Promise<FixSummary>;
+/**
+ * Render the fix summary.
+ */
+export declare function renderFixSummary(summary: FixSummary, reporter: Reporter): void;
+//# sourceMappingURL=fix.d.ts.map

package/dist/action/cli/fix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/fix.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAqBrE;AAgDD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,EAAE,CAsBxE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CA2B7D;AA+ED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,OAAO,EAAE,EACnB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,UAAU,CAAC,CAkGrB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAuC9E"}

package/dist/action/cli/fix.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fix.test.d.ts.map

package/dist/action/cli/fix.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.test.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/fix.test.ts"],"names":[],"mappings":""}

package/dist/action/cli/git.d.ts

@@ -0,0 +1,73 @@
+export interface GitFileChange {
+    filename: string;
+    status: 'added' | 'removed' | 'modified' | 'renamed' | 'copied';
+    additions: number;
+    deletions: number;
+    patch?: string;
+    chunks?: number;
+}
+/**
+ * Get the current branch name.
+ */
+export declare function getCurrentBranch(cwd?: string): string;
+/**
+ * Get the HEAD commit SHA.
+ */
+export declare function getHeadSha(cwd?: string): string;
+/**
+ * Detect the default branch by checking common branch names locally.
+ * Does not perform any remote operations to avoid SSH prompts.
+ */
+export declare function getDefaultBranch(cwd?: string): string;
+/**
+ * Get the repository root path.
+ */
+export declare function getRepoRoot(cwd?: string): string;
+/**
+ * Get the repository name from the git remote or directory name.
+ */
+export declare function getRepoName(cwd?: string): {
+    owner: string;
+    name: string;
+};
+/**
+ * Get the GitHub repository URL if the remote is on GitHub.
+ * Returns null if the remote is not GitHub or not configured.
+ */
+export declare function getGitHubRepoUrl(cwd?: string): string | null;
+/**
+ * Get list of changed files between two refs.
+ * If head is undefined, compares against the working tree.
+ */
+export declare function getChangedFiles(base: string, head?: string, cwd?: string): GitFileChange[];
+/**
+ * Get the patch for a specific file.
+ */
+export declare function getFilePatch(base: string, head: string | undefined, filename: string, cwd?: string): string | undefined;
+/**
+ * Get patches for all changed files in a single git command.
+ */
+export declare function getChangedFilesWithPatches(base: string, head?: string, cwd?: string): GitFileChange[];
+/**
+ * Check if there are uncommitted changes in the working tree.
+ */
+export declare function hasUncommittedChanges(cwd?: string): boolean;
+/**
+ * Check if a ref exists.
+ */
+export declare function refExists(ref: string, cwd?: string): boolean;
+/**
+ * Commit message with subject and body separated.
+ */
+export interface CommitMessage {
+    /** First line of the commit message */
+    subject: string;
+    /** Remaining lines after the subject (may be empty) */
+    body: string;
+}
+/**
+ * Get the commit message for a specific ref.
+ * Returns subject (first line) and body (remaining lines) separately.
+ */
+export declare function getCommitMessage(ref: string, cwd?: string): CommitMessage;
+//# sourceMappingURL=git.d.ts.map

package/dist/action/cli/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/git.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmBD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAEpE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE9D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAsBpE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE/D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAsB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiBxF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAiB3E;AAsBD;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,EACb,GAAG,GAAE,MAAsB,GAC1B,aAAa,EAAE,CA8CjB;AAED;;GAEG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAsB,GAC1B,MAAM,GAAG,SAAS,CAOpB;AA6BD;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,EACb,GAAG,GAAE,MAAsB,GAC1B,aAAa,EAAE,CA0BjB;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAG1E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,OAAO,CAO3E;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,aAAa,CAKxF"}

package/dist/action/cli/git.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=git.test.d.ts.map

package/dist/action/cli/git.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.test.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/git.test.ts"],"names":[],"mappings":""}

package/dist/action/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/action/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/index.ts"],"names":[],"mappings":""}

package/dist/action/cli/main.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Global abort controller for graceful shutdown on SIGINT.
+ * Used to cancel in-progress SDK queries.
+ */
+export declare const abortController: AbortController;
+export declare function main(): Promise<void>;
+//# sourceMappingURL=main.d.ts.map

package/dist/action/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["file:///home/runner/work/warden/warden/src/cli/main.ts"],"names":[],"mappings":"AAoCA;;;GAGG;AACH,eAAO,MAAM,eAAe,iBAAwB,CAAC;AAokBrD,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAmD1C"}

package/dist/action/cli/output/box.d.ts

@@ -0,0 +1,75 @@
+import type { OutputMode } from './tty.js';
+/**
+ * Options for creating a box.
+ */
+export interface BoxOptions {
+    /** Title displayed in the header (left side) */
+    title: string;
+    /** Badge displayed in the header (right side, e.g., duration) */
+    badge?: string;
+    /** Output mode for TTY vs non-TTY rendering */
+    mode: OutputMode;
+    /** Minimum width for the box (default: 50) */
+    minWidth?: number;
+}
+/**
+ * Renders box-style containers for terminal output.
+ * Supports TTY mode with Unicode box characters and CI mode with plain text.
+ */
+export declare class BoxRenderer {
+    private readonly title;
+    private readonly badge;
+    private readonly mode;
+    private readonly width;
+    private readonly lines;
+    constructor(options: BoxOptions);
+    /**
+     * Render the top border with title and optional badge.
+     * TTY: ┌─ title ─────────────────────── badge ─┐
+     * CI:  === title (badge) ===
+     */
+    header(): this;
+    /**
+     * Get the available content width (excluding borders and padding).
+     */
+    get contentWidth(): number;
+    /**
+     * Add content lines with side borders (TTY) or plain (CI).
+     * Long lines are automatically wrapped to fit within the box.
+     */
+    content(contentLines: string | string[]): this;
+    /**
+     * Wrap a line to fit within the content width.
+     * Preserves leading indentation on wrapped lines.
+     */
+    private wrapLine;
+    /**
+     * Add an empty content line.
+     */
+    blank(): this;
+    /**
+     * Render a horizontal divider.
+     * TTY: ├─────────────────────────────────────────────┤
+     * CI:  ---
+     */
+    divider(): this;
+    /**
+     * Render the bottom border.
+     * TTY: └─────────────────────────────────────────────┘
+     * CI:  (nothing in CI mode - just ends)
+     */
+    footer(): this;
+    /**
+     * Get all rendered lines.
+     */
+    render(): string[];
+    /**
+     * Get the rendered output as a single string.
+     */
+    toString(): string;
+    /**
+     * Strip ANSI escape codes from a string for length calculation.
+     */
+    private stripAnsi;
+}
+//# sourceMappingURL=box.d.ts.map