@testsmith/api-spector 0.5.2 → 0.5.4

package/out/main/chunks/{handle-b6bp3fb0.js → handle-BFaeFA0A.js}

@@ -4,6 +4,10 @@ const IPC = {
   file: {
     openWorkspace: "file:openWorkspace",
     openWorkspacePath: "file:openWorkspacePath",
+    openFromGit: "file:openFromGit",
+    /** Event (main→renderer): a `spector://open-from-git?url=…` deep link was
+     *  received; the renderer runs the same open-from-Git flow as the button. */
+    openFromGitDeepLink: "file:openFromGitDeepLink",
     getLastWorkspace: "file:getLastWorkspace",
     getRecentWorkspaces: "file:getRecentWorkspaces",
     saveWorkspace: "file:saveWorkspace",

package/out/main/chunks/{import-BeY7gjWL.js → import-BBr8q5eT.js}

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const uuid = require("uuid");
-const soapHandler = require("./soap-handler-BYkE6MyE.js");
-require("./handle-b6bp3fb0.js");
+const soapHandler = require("./soap-handler-DCCE344x.js");
+require("./handle-BFaeFA0A.js");
 require("https");
 require("http");
 require("@xmldom/xmldom");

package/out/main/chunks/{request-exec-D_xyyt3_.js → request-exec-Dg-EHFX0.js}

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 const undici = require("undici");
 const promises = require("fs/promises");
 const nodeTls = require("tls");
-const handle = require("./handle-b6bp3fb0.js");
+const handle = require("./handle-BFaeFA0A.js");
 const fs = require("node:fs");
 const os = require("node:os");
 const path$1 = require("node:path");
@@ -2252,6 +2252,7 @@ exports.buildSchemaTestResults = buildSchemaTestResults;
 exports.buildUrl = buildUrl;
 exports.deriveRunStatus = deriveRunStatus;
 exports.executeRunnerRequest = executeRunnerRequest;
+exports.fetchOAuth2Token = fetchOAuth2Token;
 exports.getGlobals = getGlobals;
 exports.getSecret = getSecret;
 exports.hasSecretScheme = hasSecretScheme;

package/out/main/chunks/{snapshots-BJiZNuRN.js → snapshots-CN8g7lqA.js}

@@ -3,7 +3,7 @@ const promises = require("fs/promises");
 const path = require("path");
 const crypto = require("crypto");
 const undici = require("undici");
-const requestExec = require("./request-exec-D_xyyt3_.js");
+const requestExec = require("./request-exec-Dg-EHFX0.js");
 const Ajv = require("ajv");
 const jsYaml = require("js-yaml");
 require("http");

package/out/main/chunks/{soap-handler-BYkE6MyE.js → soap-handler-DCCE344x.js}

@@ -1,5 +1,5 @@
 "use strict";
-const handle = require("./handle-b6bp3fb0.js");
+const handle = require("./handle-BFaeFA0A.js");
 const https = require("https");
 const http = require("http");
 const xmldom = require("@xmldom/xmldom");
@@ -315,7 +315,7 @@ function registerSoapHandlers(ipc) {
   handle.handleIpc(ipc, handle.IPC.wsdl.import, async (_event, opts) => {
     const { validateWsdlImport } = await Promise.resolve().then(() => require("./ipc-validate-k6KI8adf.js"));
     validateWsdlImport(opts);
-    const { importWsdl } = await Promise.resolve().then(() => require("./import-BeY7gjWL.js"));
+    const { importWsdl } = await Promise.resolve().then(() => require("./import-BBr8q5eT.js"));
     const wsdlText = opts.xml ?? (opts.url ? await fetchUrl(opts.url) : "");
     if (!wsdlText) throw new Error("wsdl:import requires either `url` or `xml`");
     return importWsdl(wsdlText, { name: opts.name, existingMockPorts: opts.existingMockPorts });

package/out/main/contract.js

@@ -2,7 +2,7 @@
 "use strict";
 const promises = require("fs/promises");
 const path = require("path");
-const snapshots = require("./chunks/snapshots-BJiZNuRN.js");
+const snapshots = require("./chunks/snapshots-CN8g7lqA.js");
 const crypto = require("crypto");
 const undici = require("undici");
 const os = require("os");
@@ -10,9 +10,9 @@ const cliCommon = require("./chunks/cli-common-BKYgsbGB.js");
 const child_process = require("child_process");
 const jsYaml = require("js-yaml");
 const environments = require("./chunks/environments-iM3SUM-4.js");
-require("./chunks/request-exec-D_xyyt3_.js");
+require("./chunks/request-exec-Dg-EHFX0.js");
 require("tls");
-require("./chunks/handle-b6bp3fb0.js");
+require("./chunks/handle-BFaeFA0A.js");
 require("node:fs");
 require("node:os");
 require("node:path");

package/out/main/index.js

@@ -22,17 +22,17 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 const electron = require("electron");
-const handle = require("./chunks/handle-b6bp3fb0.js");
+const handle = require("./chunks/handle-BFaeFA0A.js");
 const path = require("path");
 const fs$1 = require("fs");
 const promises = require("fs/promises");
 const crypto = require("crypto");
-const requestExec = require("./chunks/request-exec-D_xyyt3_.js");
+const JSZip = require("jszip");
+const requestExec = require("./chunks/request-exec-Dg-EHFX0.js");
 const ipcValidate = require("./chunks/ipc-validate-k6KI8adf.js");
 const uuid = require("uuid");
 const jsYaml = require("js-yaml");
 const undici = require("undici");
-const JSZip = require("jszip");
 const requestCollection = require("./chunks/request-collection-CJoXpvOw.js");
 const mockServer = require("./chunks/mock-server-BxiXhP1m.js");
 const http = require("http");
@@ -42,10 +42,10 @@ const os = require("node:os");
 const path$1 = require("node:path");
 const grpc = require("@grpc/grpc-js");
 const protoLoader = require("@grpc/proto-loader");
-const soapHandler = require("./chunks/soap-handler-BYkE6MyE.js");
+const soapHandler = require("./chunks/soap-handler-DCCE344x.js");
 const promises$1 = require("node:fs/promises");
 const os$1 = require("os");
-const snapshots = require("./chunks/snapshots-BJiZNuRN.js");
+const snapshots = require("./chunks/snapshots-CN8g7lqA.js");
 const simpleGit = require("simple-git");
 const recorder = require("./chunks/recorder-0Ij921El.js");
 require("tls");
@@ -461,6 +461,40 @@ Create a workspace in this folder and add "${path.basename(wsPath)}" to it? The
     requestExec.setSecretsConfig(parsed.settings?.secrets);
     return { workspace: parsed, workspacePath: wsPath };
   });
+  handle.handleIpc(ipc, handle.IPC.file.openFromGit, async (_e, repoUrl) => {
+    const archiveUrl = await resolveArchiveUrl(repoUrl);
+    if (!archiveUrl) {
+      throw new Error("unsupported URL — use a public GitHub repo URL or a direct .zip link");
+    }
+    const pick = await electron.dialog.showOpenDialog({
+      title: "Choose a folder to clone the repository into",
+      properties: ["openDirectory", "createDirectory"],
+      buttonLabel: "Clone here"
+    });
+    if (pick.canceled || pick.filePaths.length === 0) return null;
+    const parent = pick.filePaths[0];
+    const repoName = (repoUrl.match(/github\.com\/[^/]+\/([^/#?]+)/i)?.[1] ?? "repository").replace(/\.git$/i, "").replace(/[^a-zA-Z0-9._-]+/g, "-") || "repository";
+    const destDir = path.join(parent, repoName);
+    try {
+      const existing = await promises.readdir(destDir);
+      if (existing.length > 0) {
+        throw new Error(`"${repoName}" already exists in that folder and is not empty`);
+      }
+    } catch (err) {
+      if (err instanceof Error && err.message.includes("already exists")) throw err;
+    }
+    await promises.mkdir(destDir, { recursive: true });
+    const buf = await downloadArchive(archiveUrl);
+    await extractZip(buf, destDir);
+    const wsPath = await findWorkspaceSpector(destDir);
+    const parsed = JSON.parse(await promises.readFile(wsPath, "utf8"));
+    workspaceDir = path.dirname(wsPath);
+    workspaceFile = wsPath;
+    await requestExec.loadGlobals(workspaceDir);
+    await saveLastWorkspacePath(wsPath);
+    requestExec.setSecretsConfig(parsed.settings?.secrets);
+    return { workspace: parsed, workspacePath: wsPath };
+  });
 }
 async function tryOpenWorkspaceInDir(dir) {
   let entries;
@@ -492,6 +526,103 @@ function looksLikeCollection(obj) {
   const o = obj;
   return !Array.isArray(o["collections"]) && (!!o["rootFolder"] || !!o["requests"]);
 }
+const MAX_ARCHIVE_BYTES = 100 * 1024 * 1024;
+async function resolveArchiveUrl(input) {
+  let url;
+  try {
+    url = new URL(input.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:") return null;
+  if (url.pathname.toLowerCase().endsWith(".zip")) return url.toString();
+  if (url.hostname === "github.com" || url.hostname === "www.github.com") {
+    const parts = url.pathname.replace(/^\/+|\/+$/g, "").split("/");
+    if (parts.length < 2) return null;
+    const owner = parts[0];
+    const repo = parts[1].replace(/\.git$/i, "");
+    let branch = null;
+    if (parts[2] === "tree" && parts[3]) branch = parts.slice(3).join("/");
+    if (!branch) {
+      try {
+        const resp = await fetch(`https://api.github.com/repos/${owner}/${repo}`, {
+          headers: { "User-Agent": "API-Spector", Accept: "application/vnd.github+json" }
+        });
+        if (!resp.ok) return null;
+        const meta = await resp.json();
+        branch = meta.default_branch ?? "main";
+      } catch {
+        return null;
+      }
+    }
+    return `https://codeload.github.com/${owner}/${repo}/zip/refs/heads/${branch}`;
+  }
+  return null;
+}
+async function downloadArchive(archiveUrl) {
+  const resp = await fetch(archiveUrl, { headers: { "User-Agent": "API-Spector" } });
+  if (!resp.ok) throw new Error(`download failed (HTTP ${resp.status})`);
+  const buf = Buffer.from(await resp.arrayBuffer());
+  if (buf.byteLength > MAX_ARCHIVE_BYTES) throw new Error("archive is too large");
+  return buf;
+}
+async function extractZip(buf, destDir) {
+  const zip = await JSZip.loadAsync(buf);
+  const paths = Object.keys(zip.files);
+  let root = null;
+  for (const p of paths) {
+    const top = p.split("/")[0];
+    if (root === null) root = top;
+    else if (root !== top) {
+      root = null;
+      break;
+    }
+  }
+  const prefix = root ? `${root}/` : "";
+  for (const p of paths) {
+    const entry = zip.files[p];
+    const rel = prefix && p.startsWith(prefix) ? p.slice(prefix.length) : p;
+    if (!rel) continue;
+    const outPath = path.resolve(destDir, rel);
+    if (outPath !== destDir && !outPath.startsWith(destDir + path.sep)) {
+      throw new Error("archive contains an unsafe path");
+    }
+    if (entry.dir) {
+      await promises.mkdir(outPath, { recursive: true });
+    } else {
+      await promises.mkdir(path.dirname(outPath), { recursive: true });
+      await promises.writeFile(outPath, Buffer.from(await entry.async("nodebuffer")));
+    }
+  }
+}
+async function findWorkspaceSpector(dir) {
+  const found = [];
+  async function walk(d) {
+    let entries;
+    try {
+      entries = await promises.readdir(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      const full = path.join(d, e.name);
+      if (e.isDirectory()) {
+        if (e.name === "node_modules" || e.name === ".git") continue;
+        await walk(full);
+      } else if (e.isFile() && e.name.endsWith(".spector")) {
+        try {
+          const parsed = JSON.parse(await promises.readFile(full, "utf8"));
+          if (!looksLikeCollection(parsed)) found.push(full);
+        } catch {
+        }
+      }
+    }
+  }
+  await walk(dir);
+  if (found.length === 0) throw new Error("no workspace (.spector) file found in the repository");
+  if (found.length > 1) throw new Error("multiple workspace files found — open the folder and pick one");
+  return found[0];
+}
 async function wrapCollectionAsWorkspace(collFilePath, collection) {
   const dir = path.dirname(collFilePath);
   const base = path.basename(collFilePath).replace(/\.(spector|json)$/i, "");
@@ -4550,90 +4681,108 @@ function registerMockHandlers(ipc) {
     return JSON.parse(raw);
   });
 }
-function registerOAuth2Handlers(ipc) {
-  handle.handleIpc(ipc, handle.IPC.oauth2.startFlow, async (_e, auth, vars) => {
-    const port = auth.oauth2RedirectPort ?? 9876;
-    const redirectUri = `http://localhost:${port}/callback`;
-    const authUrl = requestExec.interpolate(auth.oauth2AuthUrl ?? "", vars);
-    const tokenUrl = requestExec.interpolate(auth.oauth2TokenUrl ?? "", vars);
-    const clientId = requestExec.interpolate(auth.oauth2ClientId ?? "", vars);
-    let clientSecret = auth.oauth2ClientSecret ?? "";
-    if (!clientSecret && auth.oauth2ClientSecretRef) {
-      clientSecret = await requestExec.getSecret(auth.oauth2ClientSecretRef) ?? "";
-    }
-    clientSecret = requestExec.interpolate(clientSecret, vars);
-    if (!authUrl) throw new Error("OAuth 2.0: authUrl is required for authorization_code flow.");
-    if (!tokenUrl) throw new Error("OAuth 2.0: tokenUrl is required for authorization_code flow.");
-    if (!clientId) throw new Error("OAuth 2.0: clientId is required.");
-    const state = Math.random().toString(36).slice(2);
-    const authUrlFull = new URL(authUrl);
-    authUrlFull.searchParams.set("response_type", "code");
-    authUrlFull.searchParams.set("client_id", clientId);
-    authUrlFull.searchParams.set("redirect_uri", redirectUri);
-    authUrlFull.searchParams.set("state", state);
-    if (auth.oauth2Scopes) authUrlFull.searchParams.set("scope", auth.oauth2Scopes);
-    const code = await new Promise((resolve2, reject) => {
-      const server = http.createServer((req, res) => {
-        const reqUrl = new URL(req.url ?? "/", `http://localhost:${port}`);
-        if (!reqUrl.pathname.startsWith("/callback")) {
-          res.writeHead(404);
-          res.end();
-          return;
-        }
-        const returnedState = reqUrl.searchParams.get("state");
-        const returnedCode = reqUrl.searchParams.get("code");
-        const error = reqUrl.searchParams.get("error");
+async function resolveClientSecret(auth, vars) {
+  let secret = auth.oauth2ClientSecret ?? "";
+  if (!secret && auth.oauth2ClientSecretRef) {
+    secret = await requestExec.getSecret(auth.oauth2ClientSecretRef) ?? "";
+  }
+  return requestExec.interpolate(secret, vars);
+}
+async function browserFlow(auth, vars, flow) {
+  const port = auth.oauth2RedirectPort ?? 9876;
+  const redirectUri = `http://localhost:${port}/callback`;
+  const authUrl = requestExec.interpolate(auth.oauth2AuthUrl ?? "", vars);
+  const clientId = requestExec.interpolate(auth.oauth2ClientId ?? "", vars);
+  if (!authUrl) throw new Error(`OAuth 2.0: authUrl is required for the ${flow} flow.`);
+  if (!clientId) throw new Error("OAuth 2.0: clientId is required.");
+  const state = Math.random().toString(36).slice(2);
+  const authUrlFull = new URL(authUrl);
+  authUrlFull.searchParams.set("response_type", flow === "implicit" ? "token" : "code");
+  authUrlFull.searchParams.set("client_id", clientId);
+  authUrlFull.searchParams.set("redirect_uri", redirectUri);
+  authUrlFull.searchParams.set("state", state);
+  if (auth.oauth2Scopes) authUrlFull.searchParams.set("scope", auth.oauth2Scopes);
+  const captured = await new Promise((resolve2, reject) => {
+    const server = http.createServer((req, res) => {
+      const reqUrl = new URL(req.url ?? "/", `http://localhost:${port}`);
+      if (flow === "implicit" && reqUrl.pathname === "/callback" && !reqUrl.searchParams.get("access_token") && !reqUrl.searchParams.get("error")) {
         res.writeHead(200, { "Content-Type": "text/html" });
-        res.end("<html><body><p>Authorization complete. You may close this tab.</p></body></html>");
-        server.close();
-        if (error) {
-          reject(new Error(`OAuth 2.0 authorization error: ${error}`));
-          return;
-        }
-        if (returnedState !== state) {
-          reject(new Error("OAuth 2.0: state mismatch."));
-          return;
-        }
-        if (!returnedCode) {
-          reject(new Error("OAuth 2.0: no code in callback."));
-          return;
-        }
-        resolve2(returnedCode);
-      });
-      server.on("error", reject);
-      server.listen(port, "127.0.0.1", () => {
-        electron.shell.openExternal(authUrlFull.toString()).catch(reject);
-      });
-      setTimeout(() => {
-        server.close();
-        reject(new Error("OAuth 2.0 authorization timed out (5 min)."));
-      }, 5 * 60 * 1e3);
+        res.end('<!doctype html><html><body><p>Completing sign-in… you may close this tab.</p><script>location.replace("/callback/capture?" + (location.hash ? location.hash.substring(1) : ""));<\/script></body></html>');
+        return;
+      }
+      if (reqUrl.pathname !== "/callback" && reqUrl.pathname !== "/callback/capture") {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+      const params2 = Object.fromEntries(reqUrl.searchParams.entries());
+      res.writeHead(200, { "Content-Type": "text/html" });
+      res.end("<!doctype html><html><body><p>Authorization complete. You may close this tab.</p></body></html>");
+      server.close();
+      if (params2["error"]) {
+        reject(new Error(`OAuth 2.0 authorization error: ${params2["error_description"] ?? params2["error"]}`));
+        return;
+      }
+      if (params2["state"] !== state) {
+        reject(new Error("OAuth 2.0: state mismatch."));
+        return;
+      }
+      resolve2(params2);
     });
-    const { fetch: nodeFetch } = await import("undici");
-    const params = new URLSearchParams();
-    params.set("grant_type", "authorization_code");
-    params.set("code", code);
-    params.set("redirect_uri", redirectUri);
-    params.set("client_id", clientId);
-    if (clientSecret) params.set("client_secret", clientSecret);
-    const resp = await nodeFetch(tokenUrl, {
-      method: "POST",
-      headers: { "Content-Type": "application/x-www-form-urlencoded" },
-      body: params.toString()
+    server.on("error", reject);
+    server.listen(port, "127.0.0.1", () => {
+      electron.shell.openExternal(authUrlFull.toString()).catch(reject);
     });
-    if (!resp.ok) {
-      const body = await resp.text();
-      throw new Error(`OAuth 2.0 token exchange failed (${resp.status}): ${body}`);
+    setTimeout(() => {
+      server.close();
+      reject(new Error("OAuth 2.0 authorization timed out (5 min)."));
+    }, 5 * 60 * 1e3);
+  });
+  if (flow === "implicit") {
+    const accessToken2 = captured["access_token"] ?? "";
+    if (!accessToken2) throw new Error("OAuth 2.0: no access_token in implicit callback.");
+    const expiresIn2 = Number(captured["expires_in"] ?? 3600);
+    return { accessToken: accessToken2, expiresAt: Date.now() + expiresIn2 * 1e3 };
+  }
+  const code = captured["code"] ?? "";
+  if (!code) throw new Error("OAuth 2.0: no code in callback.");
+  const tokenUrl = requestExec.interpolate(auth.oauth2TokenUrl ?? "", vars);
+  if (!tokenUrl) throw new Error("OAuth 2.0: tokenUrl is required for the authorization_code flow.");
+  const clientSecret = await resolveClientSecret(auth, vars);
+  const { fetch: nodeFetch } = await import("undici");
+  const params = new URLSearchParams();
+  params.set("grant_type", "authorization_code");
+  params.set("code", code);
+  params.set("redirect_uri", redirectUri);
+  params.set("client_id", clientId);
+  if (clientSecret) params.set("client_secret", clientSecret);
+  const resp = await nodeFetch(tokenUrl, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: params.toString()
+  });
+  if (!resp.ok) {
+    const body = await resp.text();
+    throw new Error(`OAuth 2.0 token exchange failed (${resp.status}): ${body}`);
+  }
+  const json = await resp.json();
+  const accessToken = String(json["access_token"] ?? "");
+  if (!accessToken) throw new Error("OAuth 2.0: token response missing access_token.");
+  const expiresIn = Number(json["expires_in"] ?? 3600);
+  return {
+    accessToken,
+    expiresAt: Date.now() + expiresIn * 1e3,
+    refreshToken: json["refresh_token"] ? String(json["refresh_token"]) : void 0
+  };
+}
+function registerOAuth2Handlers(ipc) {
+  handle.handleIpc(ipc, handle.IPC.oauth2.startFlow, async (_e, auth, vars) => {
+    if (auth.type !== "oauth2") throw new Error("OAuth 2.0: auth is not an oauth2 config.");
+    const flow = auth.oauth2Flow ?? "client_credentials";
+    if (flow === "authorization_code" || flow === "implicit") {
+      return browserFlow(auth, vars, flow);
     }
-    const json = await resp.json();
-    const accessToken = String(json["access_token"] ?? "");
-    if (!accessToken) throw new Error("OAuth 2.0: token response missing access_token.");
-    const expiresIn = Number(json["expires_in"] ?? 3600);
-    return {
-      accessToken,
-      expiresAt: Date.now() + expiresIn * 1e3,
-      refreshToken: json["refresh_token"] ? String(json["refresh_token"]) : void 0
-    };
+    return requestExec.fetchOAuth2Token(auth, vars);
   });
   handle.handleIpc(ipc, handle.IPC.oauth2.refreshToken, async (_e, auth, vars, refreshToken) => {
     const tokenUrl = requestExec.interpolate(auth.oauth2TokenUrl ?? "", vars);
@@ -5792,7 +5941,7 @@ function isNewer(a, b) {
   return a2 > b2;
 }
 async function checkForUpdate() {
-  const current = "0.5.2";
+  const current = "0.5.4";
   try {
     const res = await fetch(REGISTRY_URL, { signal: AbortSignal.timeout(4e3) });
     if (!res.ok) return null;
@@ -5813,6 +5962,47 @@ if (process.env.ELECTRON_NO_SANDBOX === "1") {
   electron.app.commandLine.appendSwitch("no-sandbox");
   electron.app.commandLine.appendSwitch("disable-features", "RendererCodeIntegrity");
 }
+const PROTOCOL = "spector";
+let pendingRepoUrl = null;
+function deepLinkFromArgv(argv) {
+  return argv.find((a) => a.startsWith(`${PROTOCOL}://`)) ?? null;
+}
+function parseOpenFromGit(deepLink) {
+  let u;
+  try {
+    u = new URL(deepLink);
+  } catch {
+    return null;
+  }
+  if (u.protocol !== `${PROTOCOL}:`) return null;
+  const action = u.hostname || u.pathname.replace(/^\/+/, "").split("/")[0];
+  if (action !== "open-from-git") return null;
+  const repo = u.searchParams.get("url");
+  return repo && repo.trim() ? repo.trim() : null;
+}
+function handleDeepLink(deepLink) {
+  const repo = parseOpenFromGit(deepLink);
+  if (!repo) return;
+  const win = electron.BrowserWindow.getAllWindows()[0];
+  if (!win) {
+    pendingRepoUrl = repo;
+    if (electron.app.isReady()) createWindow();
+    return;
+  }
+  if (win.isMinimized()) win.restore();
+  win.focus();
+  if (win.webContents.isLoading()) {
+    pendingRepoUrl = repo;
+  } else {
+    win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+  }
+}
+function flushDeepLink(win) {
+  if (!pendingRepoUrl) return;
+  const repo = pendingRepoUrl;
+  pendingRepoUrl = null;
+  win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+}
 function createSplashWindow() {
   const splash = new electron.BrowserWindow({
     width: 420,
@@ -5885,6 +6075,7 @@ function createWindow() {
     setTimeout(() => {
       splash.close();
       win.show();
+      flushDeepLink(win);
     }, remaining);
   });
   if (process.platform === "win32") {
@@ -5898,6 +6089,31 @@ function createWindow() {
     if (devToolsShortcut) win.webContents.toggleDevTools();
   });
 }
+if (process.defaultApp && process.argv.length >= 2) {
+  electron.app.setAsDefaultProtocolClient(PROTOCOL, process.execPath, [path.resolve(process.argv[1])]);
+} else {
+  electron.app.setAsDefaultProtocolClient(PROTOCOL);
+}
+const gotLock = electron.app.requestSingleInstanceLock();
+if (!gotLock) {
+  electron.app.quit();
+} else {
+  electron.app.on("second-instance", (_e, argv) => {
+    const url = deepLinkFromArgv(argv);
+    if (url) handleDeepLink(url);
+    else {
+      const win = electron.BrowserWindow.getAllWindows()[0];
+      if (win) {
+        if (win.isMinimized()) win.restore();
+        win.focus();
+      }
+    }
+  });
+}
+electron.app.on("open-url", (event, url) => {
+  event.preventDefault();
+  handleDeepLink(url);
+});
 electron.app.whenReady().then(async () => {
   if (process.platform !== "darwin") electron.Menu.setApplicationMenu(null);
   await requestExec.initSecretStore(electron.app.getPath("userData"));
@@ -5922,6 +6138,10 @@ electron.app.whenReady().then(async () => {
   handle.handleIpc(electron.ipcMain, handle.IPC.shell.openExternal, (_e, url) => electron.shell.openExternal(url));
   handle.handleIpc(electron.ipcMain, handle.IPC.app.checkUpdate, () => checkForUpdate());
   createWindow();
+  if (process.platform !== "darwin") {
+    const url = deepLinkFromArgv(process.argv);
+    if (url) handleDeepLink(url);
+  }
   electron.app.on("activate", () => {
     if (electron.BrowserWindow.getAllWindows().length === 0) createWindow();
   });

package/out/main/lib.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const mockServer = require("./chunks/mock-server-BxiXhP1m.js");
-const requestExec = require("./chunks/request-exec-D_xyyt3_.js");
+const requestExec = require("./chunks/request-exec-Dg-EHFX0.js");
 require("http");
 require("crypto");
 require("vm");
@@ -10,7 +10,7 @@ require("@xmldom/xmldom");
 require("undici");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-b6bp3fb0.js");
+require("./chunks/handle-BFaeFA0A.js");
 require("node:fs");
 require("node:os");
 require("node:path");

package/out/main/runner.js

@@ -2,13 +2,13 @@
 "use strict";
 const promises = require("fs/promises");
 const path = require("path");
-const requestExec = require("./chunks/request-exec-D_xyyt3_.js");
+const requestExec = require("./chunks/request-exec-Dg-EHFX0.js");
 const requestCollection = require("./chunks/request-collection-CJoXpvOw.js");
 const environments = require("./chunks/environments-iM3SUM-4.js");
 const cliCommon = require("./chunks/cli-common-BKYgsbGB.js");
 require("undici");
 require("tls");
-require("./chunks/handle-b6bp3fb0.js");
+require("./chunks/handle-BFaeFA0A.js");
 require("node:fs");
 require("node:os");
 require("node:path");
@@ -402,7 +402,7 @@ async function main() {
   } else if (!envName && workspace.settings?.defaultEnvironment && !env) {
     console.warn(cliCommon.color(`Warning: default environment "${workspace.settings.defaultEnvironment}" not found. Running without environment.`, cliCommon.C.yellow));
   }
-  const version = `v${"0.5.2"}`;
+  const version = `v${"0.5.4"}`;
   console.log("");
   console.log(cliCommon.color("  API Test Runner" + (version ? ` ${version}` : ""), cliCommon.C.bold, cliCommon.C.white));
   console.log(cliCommon.color(`  Workspace:   ${wsPath}`, cliCommon.C.gray));

package/out/main/wsdl.js

@@ -4,10 +4,10 @@ const promises = require("fs/promises");
 const path = require("path");
 const https = require("https");
 const http = require("http");
-const soapHandler = require("./chunks/soap-handler-BYkE6MyE.js");
-const _import = require("./chunks/import-BeY7gjWL.js");
+const soapHandler = require("./chunks/soap-handler-DCCE344x.js");
+const _import = require("./chunks/import-BBr8q5eT.js");
 const cliCommon = require("./chunks/cli-common-BKYgsbGB.js");
-require("./chunks/handle-b6bp3fb0.js");
+require("./chunks/handle-BFaeFA0A.js");
 require("@xmldom/xmldom");
 require("uuid");
 require("crypto");

package/out/preload/index.js

@@ -5,6 +5,10 @@ const IPC = {
   file: {
     openWorkspace: "file:openWorkspace",
     openWorkspacePath: "file:openWorkspacePath",
+    openFromGit: "file:openFromGit",
+    /** Event (main→renderer): a `spector://open-from-git?url=…` deep link was
+     *  received; the renderer runs the same open-from-Git flow as the button. */
+    openFromGitDeepLink: "file:openFromGitDeepLink",
     getLastWorkspace: "file:getLastWorkspace",
     getRecentWorkspaces: "file:getRecentWorkspaces",
     saveWorkspace: "file:saveWorkspace",
@@ -215,6 +219,13 @@ const api = {
   getLastWorkspace: () => electron.ipcRenderer.invoke(IPC.file.getLastWorkspace),
   getRecentWorkspaces: () => electron.ipcRenderer.invoke(IPC.file.getRecentWorkspaces),
   openWorkspacePath: (path) => electron.ipcRenderer.invoke(IPC.file.openWorkspacePath, path),
+  openFromGit: (repoUrl) => electron.ipcRenderer.invoke(IPC.file.openFromGit, repoUrl),
+  onOpenFromGit: (cb) => {
+    electron.ipcRenderer.on(IPC.file.openFromGitDeepLink, (_e, repoUrl) => cb(repoUrl));
+  },
+  offOpenFromGit: () => {
+    electron.ipcRenderer.removeAllListeners(IPC.file.openFromGitDeepLink);
+  },
   saveWorkspace: (ws) => electron.ipcRenderer.invoke(IPC.file.saveWorkspace, ws),
   newWorkspace: () => electron.ipcRenderer.invoke(IPC.file.newWorkspace),
   closeWorkspace: () => electron.ipcRenderer.invoke(IPC.file.closeWorkspace),