@vibe-agent-toolkit/cli 0.1.38 → 0.1.39-rc.10

package/dist/utils/verdict-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verdict-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/verdict-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,OAAO,EACb,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAUlF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,eAAe,EAAE,CAiBnB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,yBAAyB,EACjC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,EAChD,eAAe,EAAE,MAAM,GACtB,IAAI,CAgBN"}
+{"version":3,"file":"verdict-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/verdict-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,OAAO,EACb,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,eAAe,CAUlF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,SAAS,WAAW,EAAE,EACpC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,EAChD,QAAQ,EAAE,MAAM,GACf,eAAe,EAAE,CAiBnB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,yBAAyB,EACjC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,EAChD,eAAe,EAAE,MAAM,GACtB,IAAI,CAgBN"}

package/dist/utils/verdict-helpers.js

@@ -12,7 +12,7 @@
  * nor in marketplace (which knows nothing about config-level packaging
  * options).
  */
-import { CODE_REGISTRY, } from '@vibe-agent-toolkit/agent-skills';
+import { CODE_REGISTRY } from '@vibe-agent-toolkit/agent-schema';
 import { computeVerdicts, resolveEffectiveTargets, } from '@vibe-agent-toolkit/claude-marketplace';
 /**
  * Convert a verdict into a ValidationIssue using CODE_REGISTRY for severity,

package/dist/utils/verdict-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"verdict-helpers.js","sourceRoot":"","sources":["../../src/utils/verdict-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,aAAa,GAId,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,uBAAuB,GAGxB,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,QAAgB;IAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,eAAe;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoC,EACpC,aAAgD,EAChD,QAAgB;IAEhB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;QAC/C,aAAa,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;QAC3E,aAAa,EAAE,SAAS;QACxB,kBAAkB,EAAE,SAAS;KAC9B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;QAC/B,OAAO,EAAE,gBAAgB;KAC1B,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiC,EACjC,aAAgD,EAChD,eAAuB;IAEvB,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACjG,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC1B,CAAC;AACH,CAAC"}
+{"version":3,"file":"verdict-helpers.js","sourceRoot":"","sources":["../../src/utils/verdict-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,aAAa,EAAwB,MAAM,kCAAkC,CAAC;AAKvF,OAAO,EACL,eAAe,EACf,uBAAuB,GAGxB,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,QAAgB;IAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,eAAe;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ;QACR,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,YAAoC,EACpC,aAAgD,EAChD,QAAgB;IAEhB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;QAC/C,aAAa,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;QAC3E,aAAa,EAAE,SAAS;QACxB,kBAAkB,EAAE,SAAS;KAC9B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC;QAC/B,OAAO,EAAE,gBAAgB;KAC1B,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAiC,EACjC,aAAgD,EAChD,eAAuB;IAEvB,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACjG,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/docs/resources.md

@@ -172,10 +172,14 @@ resources:
   exclude:
     - "node_modules/**"
     - "**/test/fixtures/**"
+  # Optional: per-code severity overrides (keys are validation codes,
+  # values are error | warning | info | ignore). External-URL findings
+  # default to `warning` (non-fatal), so a dead external link won't fail
+  # the build unless you raise its severity here.
   validation:
-    checkLinks: true
-    checkAnchors: true
-    allowExternal: true
+    severity:
+      EXTERNAL_URL_DEAD: ignore        # don't fail the build on dead external links
+      FRONTMATTER_SCHEMA_ERROR: error
 ```
 
 ## Integration with vibe-validate

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-agent-toolkit/cli",
-  "version": "0.1.38",
+  "version": "0.1.39-rc.10",
   "description": "Command-line interface for vibe-agent-toolkit",
   "type": "module",
   "bin": {
@@ -41,16 +41,16 @@
   "//dependencies-note": "DO NOT add example agent packages or adopter packages here. Adopter packages (like vat-development-agents) depend on the CLI binary at build time — declaring them as deps creates a circular build dependency. They are built in a second turbo pass via package#task overrides in turbo.json.",
   "dependencies": {
     "@anthropic-ai/sdk": "^0.71.2",
-    "@vibe-agent-toolkit/agent-config": "0.1.38",
-    "@vibe-agent-toolkit/agent-schema": "0.1.38",
-    "@vibe-agent-toolkit/agent-skills": "0.1.38",
-    "@vibe-agent-toolkit/claude-marketplace": "0.1.38",
-    "@vibe-agent-toolkit/discovery": "0.1.38",
-    "@vibe-agent-toolkit/gateway-mcp": "0.1.38",
-    "@vibe-agent-toolkit/rag": "0.1.38",
-    "@vibe-agent-toolkit/rag-lancedb": "0.1.38",
-    "@vibe-agent-toolkit/resources": "0.1.38",
-    "@vibe-agent-toolkit/utils": "0.1.38",
+    "@vibe-agent-toolkit/agent-config": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/agent-schema": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/agent-skills": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/claude-marketplace": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/discovery": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/gateway-mcp": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/rag": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/rag-lancedb": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/resources": "0.1.39-rc.10",
+    "@vibe-agent-toolkit/utils": "0.1.39-rc.10",
     "adm-zip": "^0.5.16",
     "commander": "^12.1.0",
     "picomatch": "^4.0.3",

package/dist/commands/claude/marketplace/tag-utils.d.ts

@@ -1,11 +0,0 @@
-/**
- * Format a per-plugin source-repo tag name for the multi-plugin marketplace
- * publish flow.
- *
- * Plugin-name validation (`/^[a-z0-9][a-z0-9-]*$/`) is enforced upstream by
- * `ClaudeMarketplacePluginEntrySchema`; semver validation is enforced upstream
- * by the schema's `version` refine. This formatter only enforces non-empty
- * inputs.
- */
-export declare function pluginTagName(name: string, version: string): string;
-//# sourceMappingURL=tag-utils.d.ts.map

package/dist/commands/claude/marketplace/tag-utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tag-utils.d.ts","sourceRoot":"","sources":["../../../../src/commands/claude/marketplace/tag-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAInE"}

package/dist/commands/claude/marketplace/tag-utils.js

@@ -1,17 +0,0 @@
-/**
- * Format a per-plugin source-repo tag name for the multi-plugin marketplace
- * publish flow.
- *
- * Plugin-name validation (`/^[a-z0-9][a-z0-9-]*$/`) is enforced upstream by
- * `ClaudeMarketplacePluginEntrySchema`; semver validation is enforced upstream
- * by the schema's `version` refine. This formatter only enforces non-empty
- * inputs.
- */
-export function pluginTagName(name, version) {
-    if (!name)
-        throw new Error('Plugin name is required for tag naming');
-    if (!version)
-        throw new Error('Version is required for tag naming');
-    return `${name}-v${version}`;
-}
-//# sourceMappingURL=tag-utils.js.map

package/dist/commands/claude/marketplace/tag-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tag-utils.js","sourceRoot":"","sources":["../../../../src/commands/claude/marketplace/tag-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpE,OAAO,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/utils/git-url.d.ts

@@ -1,43 +0,0 @@
-/**
- * Parsed representation of a git URL accepted by `vat audit`.
- *
- * - `cloneUrl` is the URL passed to `git clone` (after stripping ref/subpath
- *   fragments and after expanding GitHub shorthand to a full HTTPS URL).
- * - `ref` is an optional branch or tag name (deep commit SHAs are not
- *   guaranteed to work with shallow clone — see design spec for details).
- * - `subpath` is an optional subdirectory within the cloned repo to audit.
- */
-export interface ParsedGitUrl {
-    cloneUrl: string;
-    ref?: string;
-    subpath?: string;
-}
-/**
- * Parse a string into a {@link ParsedGitUrl}.
- *
- * Accepted forms:
- *  - `https://host/owner/repo.git`
- *  - `https://host/owner/repo.git#ref`
- *  - `https://host/owner/repo.git#ref:subpath`
- *  - `https://github.com/owner/repo/tree/<ref>/<subpath>` (GitHub web URL)
- *  - `owner/repo` (GitHub shorthand → expanded to HTTPS)
- *  - `git@host:owner/repo.git`
- *  - `ssh://git@host/owner/repo.git`
- *
- * Throws on malformed input.
- */
-export declare function parseGitUrl(input: string): ParsedGitUrl;
-/**
- * Detect whether a string should be treated as a git URL (for the polymorphic
- * `[git-url-or-path]` audit argument). True for:
- *  - http(s):// URLs
- *  - ssh:// URLs
- *  - file:// URLs (used by integration tests against local bare repos)
- *  - git@host:path scp-style URLs
- *  - GitHub shorthand `owner/repo` (strict — no extensions, no extra slashes)
- *
- * Everything else (including relative paths like `./foo/bar`, absolute paths,
- * and multi-segment paths like `foo/bar/baz`) is treated as a filesystem path.
- */
-export declare function isGitUrl(input: string): boolean;
-//# sourceMappingURL=git-url.d.ts.map

package/dist/utils/git-url.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-url.d.ts","sourceRoot":"","sources":["../../src/utils/git-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAgEvD;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAmB/C"}

package/dist/utils/git-url.js

@@ -1,135 +0,0 @@
-/**
- * Split a URL with an optional `#ref[:subpath]` fragment into the base URL
- * and fragment components. Keeps the fragment-handling logic local so the
- * per-form regexes can stay simple and anchored.
- */
-function splitFragment(input) {
-    const hashIndex = input.indexOf('#');
-    if (hashIndex === -1) {
-        return { base: input };
-    }
-    const base = input.slice(0, hashIndex);
-    const fragment = input.slice(hashIndex + 1);
-    const colonIndex = fragment.indexOf(':');
-    if (colonIndex === -1) {
-        return { base, ref: fragment };
-    }
-    return {
-        base,
-        ref: fragment.slice(0, colonIndex),
-        subpath: fragment.slice(colonIndex + 1),
-    };
-}
-/**
- * Parse a string into a {@link ParsedGitUrl}.
- *
- * Accepted forms:
- *  - `https://host/owner/repo.git`
- *  - `https://host/owner/repo.git#ref`
- *  - `https://host/owner/repo.git#ref:subpath`
- *  - `https://github.com/owner/repo/tree/<ref>/<subpath>` (GitHub web URL)
- *  - `owner/repo` (GitHub shorthand → expanded to HTTPS)
- *  - `git@host:owner/repo.git`
- *  - `ssh://git@host/owner/repo.git`
- *
- * Throws on malformed input.
- */
-export function parseGitUrl(input) {
-    const trimmed = input.trim();
-    if (trimmed === '') {
-        throw new Error(`Invalid git URL or path: <empty>.`);
-    }
-    // file:// form: file:///path/to/repo[#ref[:subpath]] — used primarily by
-    // integration tests that clone a local bare repo. `git clone` accepts
-    // file:// natively.
-    if (trimmed.startsWith('file://')) {
-        const { base, ref, subpath } = splitFragment(trimmed);
-        return buildParsed(base, ref, subpath);
-    }
-    // HTTPS .git form: https://host/path.git[#ref[:subpath]]
-    if (/^https?:\/\//.test(trimmed)) {
-        const { base, ref, subpath } = splitFragment(trimmed);
-        if (base.endsWith('.git')) {
-            return buildParsed(base, ref, subpath);
-        }
-        // GitHub web URL: https://github.com/owner/repo/tree/<ref>[/<subpath>]
-        const ghWeb = 
-        // eslint-disable-next-line security/detect-unsafe-regex -- Anchored ^...$ with bounded character classes; the only variable-length group is the trailing subpath. Safe from ReDoS.
-        /^https:\/\/github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/tree\/([^/]+)(?:\/(.+))?$/.exec(trimmed);
-        if (ghWeb) {
-            const owner = ghWeb[1] ?? '';
-            const repo = ghWeb[2] ?? '';
-            const webRef = ghWeb[3];
-            const webSubpath = ghWeb[4];
-            return buildParsed(`https://github.com/${owner}/${repo}.git`, webRef, webSubpath);
-        }
-    }
-    // SSH ssh:// form: ssh://git@host/path[#ref[:subpath]]
-    if (trimmed.startsWith('ssh://')) {
-        const { base, ref, subpath } = splitFragment(trimmed);
-        return buildParsed(base, ref, subpath);
-    }
-    // SSH scp-like form: git@host:owner/repo.git[#ref[:subpath]]
-    // Anchored, no alternation with nested quantifiers — safe from ReDoS.
-    if (/^[^@\s]+@[^:\s]+:[^#\s]+/.test(trimmed)) {
-        const { base, ref, subpath } = splitFragment(trimmed);
-        return buildParsed(base, ref, subpath);
-    }
-    // GitHub shorthand: owner/repo[#ref[:subpath]] (single slash in base)
-    const { base, ref, subpath } = splitFragment(trimmed);
-    const shorthand = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(base);
-    if (shorthand) {
-        const owner = shorthand[1] ?? '';
-        const repo = shorthand[2] ?? '';
-        return buildParsed(`https://github.com/${owner}/${repo}.git`, ref, subpath);
-    }
-    throw new Error(`Invalid git URL or path: ${input}. Accepted forms: ` +
-        `https://<host>/<owner>/<repo>.git, ` +
-        `git@<host>:<owner>/<repo>.git, ` +
-        `<owner>/<repo>, or a local filesystem path.`);
-}
-function buildParsed(cloneUrl, ref, subpath) {
-    const result = { cloneUrl };
-    if (ref !== undefined && ref !== '')
-        result.ref = ref;
-    if (subpath !== undefined && subpath !== '')
-        result.subpath = subpath;
-    return result;
-}
-/**
- * Detect whether a string should be treated as a git URL (for the polymorphic
- * `[git-url-or-path]` audit argument). True for:
- *  - http(s):// URLs
- *  - ssh:// URLs
- *  - file:// URLs (used by integration tests against local bare repos)
- *  - git@host:path scp-style URLs
- *  - GitHub shorthand `owner/repo` (strict — no extensions, no extra slashes)
- *
- * Everything else (including relative paths like `./foo/bar`, absolute paths,
- * and multi-segment paths like `foo/bar/baz`) is treated as a filesystem path.
- */
-export function isGitUrl(input) {
-    const trimmed = input.trim();
-    if (trimmed === '')
-        return false;
-    if (/^https?:\/\//.test(trimmed))
-        return true;
-    if (trimmed.startsWith('ssh://'))
-        return true;
-    if (trimmed.startsWith('file://'))
-        return true;
-    // Match the same scp-style pattern parseGitUrl uses, including the
-    // requirement of a non-empty path segment after the colon. Without the
-    // trailing `[^#\s]+`, `isGitUrl` would accept inputs like `foo@host:`
-    // that parseGitUrl then rejects with a less-helpful error.
-    if (/^[^@\s]+@[^:\s]+:[^#\s]+/.test(trimmed))
-        return true;
-    // Strict GitHub shorthand: exactly two segments, no extension on second,
-    // no path separators beyond the single /. Strip any `#ref[:subpath]`
-    // fragment first so `owner/repo#main` and `owner/repo#main:sub` are
-    // recognized — `parseGitUrl` handles fragments uniformly across forms.
-    const hashIndex = trimmed.indexOf('#');
-    const base = hashIndex === -1 ? trimmed : trimmed.slice(0, hashIndex);
-    return /^[A-Za-z0-9_-]+\/[A-Za-z0-9_-]+$/.test(base);
-}
-//# sourceMappingURL=git-url.js.map

package/dist/utils/git-url.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-url.js","sourceRoot":"","sources":["../../src/utils/git-url.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IACD,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;QAClC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,oBAAoB;IACpB,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,yDAAyD;IACzD,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAED,uEAAuE;QACvE,MAAM,KAAK;QACT,mLAAmL;QACnL,yFAAyF,CAAC,IAAI,CAC5F,OAAO,CACR,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,OAAO,WAAW,CAAC,sBAAsB,KAAK,IAAI,IAAI,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,6DAA6D;IAC7D,sEAAsE;IACtE,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,sEAAsE;IACtE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO,WAAW,CAAC,sBAAsB,KAAK,IAAI,IAAI,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,oBAAoB;QACnD,qCAAqC;QACrC,iCAAiC;QACjC,6CAA6C,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAY,EAAE,OAAgB;IACnE,MAAM,MAAM,GAAiB,EAAE,QAAQ,EAAE,CAAC;IAC1C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,mEAAmE;IACnE,uEAAuE;IACvE,sEAAsE;IACtE,2DAA2D;IAC3D,IAAI,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1D,yEAAyE;IACzE,qEAAqE;IACrE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC"}