@xopcai/xopc 0.0.127 → 0.0.129

package/dist/src/agent/skills/hub-lock.js

@@ -13,8 +13,8 @@ function emptyLock() {
 		entries: {}
 	};
 }
-function loadSkillsLock() {
-	const p = resolveSkillsLockPath();
+function loadSkillsLock(lockPath = resolveSkillsLockPath()) {
+	const p = lockPath;
 	if (!existsSync(p)) return emptyLock();
 	try {
 		const raw = readFileSync(p, "utf-8");
@@ -28,12 +28,12 @@ function loadSkillsLock() {
 		return emptyLock();
 	}
 }
-function saveSkillsLock(lock) {
-	writeTextAtomicSync(resolveSkillsLockPath(), `${JSON.stringify(lock, null, 2)}\n`);
+function saveSkillsLock(lock, lockPath = resolveSkillsLockPath()) {
+	writeTextAtomicSync(lockPath, `${JSON.stringify(lock, null, 2)}\n`);
 }
 /** Record or replace hub metadata for a managed skill directory id (folder name under ~/.xopc/skills). */
-function recordSkillsHubInstall(skillId, meta, contentHash) {
-	const lock = loadSkillsLock();
+function recordSkillsHubInstall(skillId, meta, contentHash, lockPath) {
+	const lock = loadSkillsLock(lockPath);
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	const prev = lock.entries[skillId];
 	lock.entries[skillId] = {
@@ -45,16 +45,16 @@ function recordSkillsHubInstall(skillId, meta, contentHash) {
 		installedAt: prev?.installedAt ?? now,
 		updatedAt: now
 	};
-	saveSkillsLock(lock);
+	saveSkillsLock(lock, lockPath);
 }
-function removeSkillsLockEntry(skillId) {
-	const lock = loadSkillsLock();
+function removeSkillsLockEntry(skillId, lockPath) {
+	const lock = loadSkillsLock(lockPath);
 	if (!lock.entries[skillId]) return;
 	delete lock.entries[skillId];
-	saveSkillsLock(lock);
+	saveSkillsLock(lock, lockPath);
 }
-function getSkillsLockEntry(skillId) {
-	return loadSkillsLock().entries[skillId];
+function getSkillsLockEntry(skillId, lockPath) {
+	return loadSkillsLock(lockPath).entries[skillId];
 }
 //#endregion
 export { getSkillsLockEntry, loadSkillsLock, recordSkillsHubInstall, removeSkillsLockEntry, saveSkillsLock };

package/dist/src/agent/skills/hub-lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub-lock.js","names":[],"sources":["../../../../src/agent/skills/hub-lock.ts"],"sourcesContent":["/**\n * Skills hub lock (~/.xopc/skills-lock.json): records install source + tree hash per managed skill id.\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\n\nimport { resolveSkillsLockPath } from '../../config/paths.js';\nimport { writeTextAtomicSync } from '../../infra/write-file-atomic.js';\n\nexport type SkillHubKind = 'git' | 'archive';\n\nexport interface SkillHubLockEntry {\n  kind: SkillHubKind;\n  /** Clone URL, tarball URL, or file path (as given at install time). */\n  source: string;\n  /** Git branch / tag / ref (optional). */\n  ref?: string;\n  /** Path inside the cloned repo (POSIX, no leading slash). */\n  subpath?: string;\n  /** Deterministic tree hash from {@link computeSkillTreeHash}. */\n  contentHash: string;\n  installedAt: string;\n  updatedAt: string;\n}\n\nexport interface SkillsLockFile {\n  version: 1;\n  entries: Record<string, SkillHubLockEntry>;\n}\n\nfunction emptyLock(): SkillsLockFile {\n  return { version: 1, entries: {} };\n}\n\nexport function loadSkillsLock(): SkillsLockFile {\n  const p = resolveSkillsLockPath();\n  if (!existsSync(p)) return emptyLock();\n  try {\n    const raw = readFileSync(p, 'utf-8');\n    const j = JSON.parse(raw) as Partial<SkillsLockFile>;\n    if (j.version !== 1 || !j.entries || typeof j.entries !== 'object') {\n      return emptyLock();\n    }\n    return { version: 1, entries: { ...j.entries } };\n  } catch {\n    return emptyLock();\n  }\n}\n\nexport function saveSkillsLock(lock: SkillsLockFile): void {\n  const p = resolveSkillsLockPath();\n  writeTextAtomicSync(p, `${JSON.stringify(lock, null, 2)}\\n`);\n}\n\n/** Record or replace hub metadata for a managed skill directory id (folder name under ~/.xopc/skills). */\nexport function recordSkillsHubInstall(\n  skillId: string,\n  meta: Pick<SkillHubLockEntry, 'kind' | 'source' | 'ref' | 'subpath'>,\n  contentHash: string,\n): void {\n  const lock = loadSkillsLock();\n  const now = new Date().toISOString();\n  const prev = lock.entries[skillId];\n  lock.entries[skillId] = {\n    kind: meta.kind,\n    source: meta.source,\n    ref: meta.ref,\n    subpath: meta.subpath,\n    contentHash,\n    installedAt: prev?.installedAt ?? now,\n    updatedAt: now,\n  };\n  saveSkillsLock(lock);\n}\n\nexport function removeSkillsLockEntry(skillId: string): void {\n  const lock = loadSkillsLock();\n  if (!lock.entries[skillId]) return;\n  delete lock.entries[skillId];\n  saveSkillsLock(lock);\n}\n\nexport function getSkillsLockEntry(skillId: string): SkillHubLockEntry | undefined {\n  return loadSkillsLock().entries[skillId];\n}\n"],"mappings":";;;;;;;YAM8D;wBACS;AAuBvE,SAAS,YAA4B;AACnC,QAAO;EAAE,SAAS;EAAG,SAAS,EAAE;EAAE;;AAGpC,SAAgB,iBAAiC;CAC/C,MAAM,IAAI,uBAAuB;AACjC,KAAI,CAAC,WAAW,EAAE,CAAE,QAAO,WAAW;AACtC,KAAI;EACF,MAAM,MAAM,aAAa,GAAG,QAAQ;EACpC,MAAM,IAAI,KAAK,MAAM,IAAI;AACzB,MAAI,EAAE,YAAY,KAAK,CAAC,EAAE,WAAW,OAAO,EAAE,YAAY,SACxD,QAAO,WAAW;AAEpB,SAAO;GAAE,SAAS;GAAG,SAAS,EAAE,GAAG,EAAE,SAAS;GAAE;SAC1C;AACN,SAAO,WAAW;;;AAItB,SAAgB,eAAe,MAA4B;AAEzD,qBADU,uBACW,EAAE,GAAG,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC,IAAI;;;AAI9D,SAAgB,uBACd,SACA,MACA,aACM;CACN,MAAM,OAAO,gBAAgB;CAC7B,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;CACpC,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAK,QAAQ,WAAW;EACtB,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,KAAK,KAAK;EACV,SAAS,KAAK;EACd;EACA,aAAa,MAAM,eAAe;EAClC,WAAW;EACZ;AACD,gBAAe,KAAK;;AAGtB,SAAgB,sBAAsB,SAAuB;CAC3D,MAAM,OAAO,gBAAgB;AAC7B,KAAI,CAAC,KAAK,QAAQ,SAAU;AAC5B,QAAO,KAAK,QAAQ;AACpB,gBAAe,KAAK;;AAGtB,SAAgB,mBAAmB,SAAgD;AACjF,QAAO,gBAAgB,CAAC,QAAQ"}
+{"version":3,"file":"hub-lock.js","names":["p"],"sources":["../../../../src/agent/skills/hub-lock.ts"],"sourcesContent":["/**\n * Skills hub lock (~/.xopc/skills-lock.json): records install source + tree hash per managed skill id.\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\n\nimport { resolveSkillsLockPath } from '../../config/paths.js';\nimport { writeTextAtomicSync } from '../../infra/write-file-atomic.js';\n\nexport type SkillHubKind = 'git' | 'archive';\n\nexport interface SkillHubLockEntry {\n  kind: SkillHubKind;\n  /** Clone URL, tarball URL, or file path (as given at install time). */\n  source: string;\n  /** Git branch / tag / ref (optional). */\n  ref?: string;\n  /** Path inside the cloned repo (POSIX, no leading slash). */\n  subpath?: string;\n  /** Deterministic tree hash from {@link computeSkillTreeHash}. */\n  contentHash: string;\n  installedAt: string;\n  updatedAt: string;\n}\n\nexport interface SkillsLockFile {\n  version: 1;\n  entries: Record<string, SkillHubLockEntry>;\n}\n\nfunction emptyLock(): SkillsLockFile {\n  return { version: 1, entries: {} };\n}\n\nexport function loadSkillsLock(lockPath = resolveSkillsLockPath()): SkillsLockFile {\n  const p = lockPath;\n  if (!existsSync(p)) return emptyLock();\n  try {\n    const raw = readFileSync(p, 'utf-8');\n    const j = JSON.parse(raw) as Partial<SkillsLockFile>;\n    if (j.version !== 1 || !j.entries || typeof j.entries !== 'object') {\n      return emptyLock();\n    }\n    return { version: 1, entries: { ...j.entries } };\n  } catch {\n    return emptyLock();\n  }\n}\n\nexport function saveSkillsLock(lock: SkillsLockFile, lockPath = resolveSkillsLockPath()): void {\n  const p = lockPath;\n  writeTextAtomicSync(p, `${JSON.stringify(lock, null, 2)}\\n`);\n}\n\n/** Record or replace hub metadata for a managed skill directory id (folder name under ~/.xopc/skills). */\nexport function recordSkillsHubInstall(\n  skillId: string,\n  meta: Pick<SkillHubLockEntry, 'kind' | 'source' | 'ref' | 'subpath'>,\n  contentHash: string,\n  lockPath?: string,\n): void {\n  const lock = loadSkillsLock(lockPath);\n  const now = new Date().toISOString();\n  const prev = lock.entries[skillId];\n  lock.entries[skillId] = {\n    kind: meta.kind,\n    source: meta.source,\n    ref: meta.ref,\n    subpath: meta.subpath,\n    contentHash,\n    installedAt: prev?.installedAt ?? now,\n    updatedAt: now,\n  };\n  saveSkillsLock(lock, lockPath);\n}\n\nexport function removeSkillsLockEntry(skillId: string, lockPath?: string): void {\n  const lock = loadSkillsLock(lockPath);\n  if (!lock.entries[skillId]) return;\n  delete lock.entries[skillId];\n  saveSkillsLock(lock, lockPath);\n}\n\nexport function getSkillsLockEntry(skillId: string, lockPath?: string): SkillHubLockEntry | undefined {\n  return loadSkillsLock(lockPath).entries[skillId];\n}\n"],"mappings":";;;;;;;YAM8D;wBACS;AAuBvE,SAAS,YAA4B;AACnC,QAAO;EAAE,SAAS;EAAG,SAAS,EAAE;EAAE;;AAGpC,SAAgB,eAAe,WAAW,uBAAuB,EAAkB;CACjF,MAAM,IAAI;AACV,KAAI,CAAC,WAAW,EAAE,CAAE,QAAO,WAAW;AACtC,KAAI;EACF,MAAM,MAAM,aAAa,GAAG,QAAQ;EACpC,MAAM,IAAI,KAAK,MAAM,IAAI;AACzB,MAAI,EAAE,YAAY,KAAK,CAAC,EAAE,WAAW,OAAO,EAAE,YAAY,SACxD,QAAO,WAAW;AAEpB,SAAO;GAAE,SAAS;GAAG,SAAS,EAAE,GAAG,EAAE,SAAS;GAAE;SAC1C;AACN,SAAO,WAAW;;;AAItB,SAAgB,eAAe,MAAsB,WAAW,uBAAuB,EAAQ;AAE7F,qBAAoBA,UAAG,GAAG,KAAK,UAAU,MAAM,MAAM,EAAE,CAAC,IAAI;;;AAI9D,SAAgB,uBACd,SACA,MACA,aACA,UACM;CACN,MAAM,OAAO,eAAe,SAAS;CACrC,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;CACpC,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAK,QAAQ,WAAW;EACtB,MAAM,KAAK;EACX,QAAQ,KAAK;EACb,KAAK,KAAK;EACV,SAAS,KAAK;EACd;EACA,aAAa,MAAM,eAAe;EAClC,WAAW;EACZ;AACD,gBAAe,MAAM,SAAS;;AAGhC,SAAgB,sBAAsB,SAAiB,UAAyB;CAC9E,MAAM,OAAO,eAAe,SAAS;AACrC,KAAI,CAAC,KAAK,QAAQ,SAAU;AAC5B,QAAO,KAAK,QAAQ;AACpB,gBAAe,MAAM,SAAS;;AAGhC,SAAgB,mBAAmB,SAAiB,UAAkD;AACpG,QAAO,eAAe,SAAS,CAAC,QAAQ"}

package/dist/src/agent/skills/hub-pull.d.ts

@@ -7,6 +7,10 @@ export interface HubPullOptions {
     ref?: string;
     subpath?: string;
     force?: boolean;
+    /** Destination skills root. Defaults to the global managed skills directory. */
+    installRoot?: string;
+    /** Hub lock path. Defaults to the global skills-lock.json. */
+    lockPath?: string;
     /** When true, critical scanner findings fail the install. */
     strictScan?: boolean;
 }
@@ -17,6 +21,16 @@ export interface HubPullResult {
     kind: SkillHubKind;
     source: string;
 }
+interface GitHubSkillSource {
+    owner: string;
+    repo: string;
+    cloneUrl: string;
+    sourceLabel: string;
+    ref?: string;
+    subpath?: string;
+    treePathParts?: string[];
+}
+export declare function parseGitHubSkillSource(raw: string, options?: Pick<HubPullOptions, 'ref' | 'subpath'>): GitHubSkillSource | undefined;
 export declare function classifyHubSource(raw: string): 'git' | 'archive';
 export declare function findSkillRoot(repoRoot: string, subpath?: string): string;
 /**
@@ -25,3 +39,4 @@ export declare function findSkillRoot(repoRoot: string, subpath?: string): strin
 export declare function pullSkillFromSource(source: string, options?: HubPullOptions): Promise<HubPullResult>;
 /** Re-install from the source recorded in ~/.xopc/skills-lock.json for this skill id. */
 export declare function updateSkillFromLock(skillId: string, options?: Pick<HubPullOptions, 'strictScan'>): Promise<HubPullResult>;
+export {};

package/dist/src/agent/skills/hub-pull.js

@@ -1,18 +1,101 @@
 import { parseFrontmatter } from "../../markdown/frontmatter.js";
 import { formatScanSummary, scanSkillDirectory } from "./scanner.js";
 import { getSkillsLockEntry, recordSkillsHubInstall } from "./hub-lock.js";
-import { installSkillFromZip, isValidSkillId, prepareManagedSkillTempDir, promoteManagedSkillTempDir } from "./managed-store.js";
+import { installSkillFromZip, isIgnorableZipEntry, isValidSkillId, prepareManagedSkillTempDir, promoteManagedSkillTempDir } from "./managed-store.js";
 import { computeSkillTreeHashSync } from "./hub-hash.js";
 import { tmpdir } from "node:os";
-import { basename, join, normalize, resolve } from "node:path";
+import { basename, dirname, join, normalize, resolve, sep } from "node:path";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { execFileSync } from "node:child_process";
 import { fetch } from "undici";
+import AdmZip from "adm-zip";
 //#region src/agent/skills/hub-pull.ts
 /**
 * CLI / hub: install or update skills from git or archive (zip / tar.gz) into ~/.xopc/skills.
 */
+var GitHubArchiveDownloadError = class extends Error {
+	constructor(message, status) {
+		super(message);
+		this.status = status;
+		this.name = "GitHubArchiveDownloadError";
+	}
+};
+function githubHeaders() {
+	const headers = {
+		Accept: "application/vnd.github+json",
+		"User-Agent": "xopc-skill-installer"
+	};
+	const token = process.env.GITHUB_TOKEN || process.env.GH_TOKEN;
+	if (token?.trim()) headers.Authorization = `Bearer ${token.trim()}`;
+	return headers;
+}
+function normalizeSourceSubpath(subpath) {
+	const raw = subpath?.trim().replace(/\\/g, "/").replace(/^\/+/, "");
+	if (!raw || raw === ".") return void 0;
+	if (/^[a-zA-Z]:/.test(raw)) throw new Error(`Invalid source path: ${subpath}`);
+	const normalized = normalize(raw);
+	if (normalized === ".." || normalized.startsWith(`..${sep}`) || resolve("/", normalized) === resolve("/")) throw new Error(`Invalid source path: ${subpath}`);
+	return normalized.replace(/\\/g, "/");
+}
+function decodeUrlPathPart(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
+function parseSshGitHubSource(raw, optionRef, optionSubpath) {
+	const ssh = raw.match(/^git@github\.com:([^/]+)\/(.+?)(?:\.git)?$/i);
+	if (!ssh) return void 0;
+	const owner = ssh[1];
+	const repo = ssh[2].replace(/\.git$/i, "");
+	return {
+		owner,
+		repo,
+		cloneUrl: `https://github.com/${owner}/${repo}.git`,
+		sourceLabel: raw,
+		ref: optionRef,
+		subpath: optionSubpath
+	};
+}
+function parseGitHubSkillSource(raw, options = {}) {
+	const optionRef = options.ref?.trim() || void 0;
+	const optionSubpath = normalizeSourceSubpath(options.subpath);
+	const sshSource = parseSshGitHubSource(raw, optionRef, optionSubpath);
+	if (sshSource) return sshSource;
+	let url;
+	try {
+		url = new URL(raw);
+	} catch {
+		return;
+	}
+	if (url.protocol !== "https:" && url.protocol !== "http:") return void 0;
+	if (url.hostname.toLowerCase() !== "github.com") return void 0;
+	const parts = url.pathname.split("/").filter(Boolean).map(decodeUrlPathPart);
+	if (parts.length < 2) return void 0;
+	const owner = parts[0];
+	const repo = parts[1].replace(/\.git$/i, "");
+	if (!owner || !repo) return void 0;
+	let ref;
+	let subpath;
+	let treePathParts;
+	const marker = parts[2]?.toLowerCase();
+	if ((marker === "tree" || marker === "blob") && parts[3]) {
+		treePathParts = parts.slice(3);
+		ref = treePathParts[0];
+		subpath = normalizeSourceSubpath(treePathParts.slice(1).join("/"));
+	} else if (parts.length > 2 && !parts[1].toLowerCase().endsWith(".git")) subpath = normalizeSourceSubpath(parts.slice(2).join("/"));
+	return {
+		owner,
+		repo,
+		cloneUrl: `https://github.com/${owner}/${repo}.git`,
+		sourceLabel: raw,
+		ref: optionRef || ref,
+		subpath: optionSubpath || subpath,
+		treePathParts
+	};
+}
 function classifyHubSource(raw) {
 	const s = raw.trim();
 	const lower = s.toLowerCase();
@@ -39,8 +122,10 @@ function classifyHubSource(raw) {
 	return "git";
 }
 function findSkillRoot(repoRoot, subpath) {
-	const sub = subpath?.trim() ? normalize(subpath.trim()).replace(/^[/\\]+/, "") : "";
-	const base = sub ? resolve(repoRoot, sub) : resolve(repoRoot);
+	const sub = normalizeSourceSubpath(subpath) || "";
+	const root = resolve(repoRoot);
+	const base = sub ? resolve(root, sub) : root;
+	if (base !== root && !base.startsWith(root + sep)) throw new Error(`Invalid source path: ${subpath}`);
 	if (!existsSync(base)) throw new Error(`Path not found in source: ${sub || "."}`);
 	if (existsSync(join(base, "SKILL.md"))) return base;
 	const entries = readdirSync(base, { withFileTypes: true }).filter((e) => e.isDirectory());
@@ -68,7 +153,7 @@ async function copySkillTreeToManaged(skillRoot, ctx) {
 	const targetId = ctx.skillId?.trim() || inferSkillIdFromSkillMd(skillRoot);
 	if (!targetId) throw new Error("Could not determine skill id: pass --id <name> (must match managed id rules)");
 	if (!isValidSkillId(targetId)) throw new Error(`Invalid skill id "${targetId}" (letters, digits, ._-; max 63 chars after first)`);
-	const { destDir, tempDir } = prepareManagedSkillTempDir(targetId);
+	const { destDir, tempDir } = prepareManagedSkillTempDir(targetId, ctx.installRoot);
 	try {
 		if (existsSync(destDir) && !ctx.force) throw new Error(`Skill "${targetId}" already exists. Use --force to replace.`);
 		cpSync(skillRoot, tempDir, { recursive: true });
@@ -77,7 +162,8 @@ async function copySkillTreeToManaged(skillRoot, ctx) {
 		const promoted = promoteManagedSkillTempDir({
 			skillId: targetId,
 			tempDir,
-			overwrite: ctx.force
+			overwrite: ctx.force,
+			rootDir: ctx.installRoot
 		});
 		const hash = computeSkillTreeHashSync(promoted.path);
 		recordSkillsHubInstall(targetId, {
@@ -85,7 +171,7 @@ async function copySkillTreeToManaged(skillRoot, ctx) {
 			source: ctx.source,
 			ref: ctx.kind === "git" ? ctx.ref : void 0,
 			subpath: ctx.kind === "git" ? ctx.subpath : void 0
-		}, hash);
+		}, hash, ctx.lockPath);
 		return {
 			skillId: targetId,
 			path: promoted.path,
@@ -104,13 +190,14 @@ async function copySkillTreeToManaged(skillRoot, ctx) {
 async function pullSkillFromZipBuffer(buf, sourceLabel, options) {
 	const r = installSkillFromZip(buf, {
 		skillId: options.skillId,
-		overwrite: options.force ?? false
+		overwrite: options.force ?? false,
+		rootDir: options.installRoot
 	});
 	const hash = computeSkillTreeHashSync(r.path);
 	recordSkillsHubInstall(r.skillId, {
 		kind: "archive",
 		source: sourceLabel
-	}, hash);
+	}, hash, options.lockPath);
 	await runScan(r.path, options.strictScan);
 	return {
 		skillId: r.skillId,
@@ -144,6 +231,188 @@ async function pullSkillFromTarFile(archivePath, sourceLabel, options) {
 		});
 	}
 }
+function isSafeArchivePath(name) {
+	if (!name) return false;
+	const normalized = name.replace(/\\/g, "/").replace(/\/+$/, "");
+	if (normalized.startsWith("/") || /^[a-zA-Z]:/.test(normalized)) return false;
+	return normalized.split("/").every((part) => part && part !== "..");
+}
+function extractZipBufferToTempDir(buf, tmpRoot) {
+	const zip = new AdmZip(buf);
+	const rootResolved = resolve(tmpRoot);
+	for (const entry of zip.getEntries()) {
+		const normalized = entry.entryName.replace(/\\/g, "/");
+		if (!normalized || isIgnorableZipEntry(normalized)) continue;
+		if (!isSafeArchivePath(normalized)) throw new Error(`Unsafe zip entry path: ${entry.entryName}`);
+		const target = join(tmpRoot, normalized);
+		const targetResolved = resolve(target);
+		if (targetResolved !== rootResolved && !targetResolved.startsWith(rootResolved + sep)) throw new Error(`Unsafe zip entry path: ${entry.entryName}`);
+		if (entry.isDirectory) {
+			mkdirSync(target, { recursive: true });
+			continue;
+		}
+		mkdirSync(dirname(target), { recursive: true });
+		writeFileSync(target, entry.getData());
+	}
+}
+function findExtractedRepositoryRoot(tmpRoot) {
+	const entries = readdirSync(tmpRoot, { withFileTypes: true }).filter((entry) => !entry.name.startsWith("."));
+	const dirs = entries.filter((entry) => entry.isDirectory());
+	const files = entries.filter((entry) => entry.isFile());
+	if (dirs.length === 1 && files.length === 0) return join(tmpRoot, dirs[0].name);
+	return tmpRoot;
+}
+async function resolveGitHubDefaultBranch(source) {
+	const apiUrl = `https://api.github.com/repos/${source.owner}/${source.repo}`;
+	try {
+		const res = await fetch(apiUrl, { headers: githubHeaders() });
+		if (!res.ok) return void 0;
+		const body = await res.json();
+		return (typeof body.default_branch === "string" ? body.default_branch.trim() : "") || void 0;
+	} catch {
+		return;
+	}
+}
+async function githubRefExists(source, namespace, ref) {
+	const url = `https://api.github.com/repos/${source.owner}/${source.repo}/git/ref/${namespace}/${encodeURI(ref)}`;
+	try {
+		return (await fetch(url, { headers: githubHeaders() })).ok;
+	} catch {
+		return false;
+	}
+}
+async function resolveGitHubTreeRefAndSubpath(source, options) {
+	const optionRef = options.ref?.trim() || void 0;
+	const optionSubpath = options.subpath || void 0;
+	if (optionRef || !source.treePathParts?.length) return {
+		ref: optionRef || source.ref,
+		subpath: optionSubpath || source.subpath
+	};
+	for (let i = source.treePathParts.length; i >= 1; i -= 1) {
+		const candidate = source.treePathParts.slice(0, i).join("/");
+		if (await githubRefExists(source, "heads", candidate) || await githubRefExists(source, "tags", candidate)) return {
+			ref: candidate,
+			subpath: optionSubpath || normalizeSourceSubpath(source.treePathParts.slice(i).join("/"))
+		};
+	}
+	return {
+		ref: source.ref,
+		subpath: optionSubpath || source.subpath
+	};
+}
+async function pullSkillFromGitHubArchive(source, options) {
+	const ref = options.ref?.trim() || await resolveGitHubDefaultBranch(source) || "main";
+	const res = await fetch(`https://codeload.github.com/${source.owner}/${source.repo}/zip/${encodeURI(ref)}`, { headers: githubHeaders() });
+	if (!res.ok) throw new GitHubArchiveDownloadError(`HTTP ${res.status} while fetching GitHub archive`, res.status);
+	const tmpRoot = mkdtempSync(join(tmpdir(), "xopc-github-zip-"));
+	try {
+		extractZipBufferToTempDir(Buffer.from(await res.arrayBuffer()), tmpRoot);
+		const repoRoot = findExtractedRepositoryRoot(tmpRoot);
+		const effectiveOptions = {
+			...options,
+			ref,
+			subpath: options.subpath || source.subpath
+		};
+		return await copySkillTreeToManaged(findSkillRoot(repoRoot, effectiveOptions.subpath), {
+			...effectiveOptions,
+			kind: "git",
+			source: source.sourceLabel
+		});
+	} finally {
+		rmSync(tmpRoot, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+async function pullSkillFromGitHubSparse(source, options) {
+	const subpath = normalizeSourceSubpath(options.subpath || source.subpath);
+	if (!subpath) return pullSkillFromGit(source.cloneUrl, options, source.sourceLabel);
+	const tmpRoot = mkdtempSync(join(tmpdir(), "xopc-github-sparse-"));
+	const cloneDir = join(tmpRoot, "clone");
+	let clonedRef = options.ref?.trim() || void 0;
+	try {
+		const args = [
+			"clone",
+			"--depth",
+			"1",
+			"--filter=blob:none",
+			"--sparse"
+		];
+		if (clonedRef) args.push("--branch", clonedRef);
+		args.push(source.cloneUrl, cloneDir);
+		try {
+			execFileSync("git", args, {
+				stdio: "pipe",
+				encoding: "utf-8"
+			});
+		} catch {
+			if (!clonedRef) throw new Error(`git clone failed for ${source.cloneUrl}`);
+			clonedRef = void 0;
+			execFileSync("git", [
+				"clone",
+				"--depth",
+				"1",
+				"--filter=blob:none",
+				"--sparse",
+				source.cloneUrl,
+				cloneDir
+			], {
+				stdio: "pipe",
+				encoding: "utf-8"
+			});
+		}
+		execFileSync("git", [
+			"-C",
+			cloneDir,
+			"sparse-checkout",
+			"set",
+			"--no-cone",
+			subpath
+		], {
+			stdio: "pipe",
+			encoding: "utf-8"
+		});
+		const effectiveOptions = {
+			...options,
+			subpath,
+			ref: clonedRef
+		};
+		return await copySkillTreeToManaged(findSkillRoot(cloneDir, subpath), {
+			...effectiveOptions,
+			kind: "git",
+			source: source.sourceLabel
+		});
+	} catch (e) {
+		const msg = e instanceof Error ? e.message : String(e);
+		if (msg.includes("ENOENT") || msg.includes("git clone failed")) throw new Error(`Git operation failed (${msg}). Ensure git is installed and the repository URL is valid.`);
+		throw e;
+	} finally {
+		rmSync(tmpRoot, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+async function pullSkillFromGitHub(source, options) {
+	const resolved = await resolveGitHubTreeRefAndSubpath(source, options);
+	const effectiveOptions = {
+		...options,
+		ref: resolved.ref,
+		subpath: resolved.subpath
+	};
+	try {
+		return await pullSkillFromGitHubArchive(source, effectiveOptions);
+	} catch (archiveErr) {
+		try {
+			return await pullSkillFromGitHubSparse(source, effectiveOptions);
+		} catch (gitErr) {
+			const archiveMsg = archiveErr instanceof Error ? archiveErr.message : String(archiveErr);
+			const gitMsg = gitErr instanceof Error ? gitErr.message : String(gitErr);
+			throw new Error(`GitHub archive install failed (${archiveMsg}); git fallback failed (${gitMsg})`);
+		}
+	}
+}
 async function pullSkillFromLocalPath(absPath, options) {
 	const resolved = resolve(absPath);
 	if (!existsSync(resolved)) throw new Error(`Not found: ${resolved}`);
@@ -153,16 +422,17 @@ async function pullSkillFromLocalPath(absPath, options) {
 	if (lower.endsWith(".tar.gz") || lower.endsWith(".tgz")) return pullSkillFromTarFile(resolved, resolved, options);
 	throw new Error("Unsupported file type (expected .zip, .tar.gz, or .tgz)");
 }
-async function pullSkillFromGit(url, options) {
+async function pullSkillFromGit(url, options, sourceLabel = url) {
 	const tmpRoot = mkdtempSync(join(tmpdir(), "xopc-hub-"));
 	const cloneDir = join(tmpRoot, "clone");
+	let clonedRef = options.ref?.trim() || void 0;
 	try {
 		const args = [
 			"clone",
 			"--depth",
 			"1"
 		];
-		if (options.ref?.trim()) args.push("--branch", options.ref.trim());
+		if (clonedRef) args.push("--branch", clonedRef);
 		args.push(url, cloneDir);
 		try {
 			execFileSync("git", args, {
@@ -170,22 +440,25 @@ async function pullSkillFromGit(url, options) {
 				encoding: "utf-8"
 			});
 		} catch {
-			if (options.ref?.trim()) execFileSync("git", [
-				"clone",
-				"--depth",
-				"1",
-				url,
-				cloneDir
-			], {
-				stdio: "pipe",
-				encoding: "utf-8"
-			});
-			else throw new Error(`git clone failed for ${url}`);
+			if (clonedRef) {
+				clonedRef = void 0;
+				execFileSync("git", [
+					"clone",
+					"--depth",
+					"1",
+					url,
+					cloneDir
+				], {
+					stdio: "pipe",
+					encoding: "utf-8"
+				});
+			} else throw new Error(`git clone failed for ${url}`);
 		}
 		return await copySkillTreeToManaged(findSkillRoot(cloneDir, options.subpath), {
 			...options,
+			ref: clonedRef,
 			kind: "git",
-			source: url
+			source: sourceLabel
 		});
 	} catch (e) {
 		const msg = e instanceof Error ? e.message : String(e);
@@ -206,6 +479,8 @@ async function pullSkillFromSource(source, options = {}) {
 	if (!trimmed) throw new Error("Missing source URL or path");
 	if (trimmed.startsWith("file:")) return pullSkillFromLocalPath(fileURLToPath(trimmed), options);
 	if (!/^[a-zA-Z][a-zA-Z+.-]*:\/\//.test(trimmed) && existsSync(trimmed)) return pullSkillFromLocalPath(resolve(trimmed), options);
+	const githubSource = parseGitHubSkillSource(trimmed, options);
+	if (githubSource) return pullSkillFromGitHub(githubSource, options);
 	if (classifyHubSource(trimmed) === "archive") {
 		const res = await fetch(trimmed);
 		if (!res.ok) throw new Error(`HTTP ${res.status} while fetching archive`);
@@ -242,6 +517,6 @@ async function updateSkillFromLock(skillId, options = {}) {
 	});
 }
 //#endregion
-export { classifyHubSource, findSkillRoot, pullSkillFromSource, updateSkillFromLock };
+export { classifyHubSource, findSkillRoot, parseGitHubSkillSource, pullSkillFromSource, updateSkillFromLock };
 
 //# sourceMappingURL=hub-pull.js.map

package/dist/src/agent/skills/hub-pull.js.map

@@ -1 +1 @@
-{"version":3,"file":"hub-pull.js","names":[],"sources":["../../../../src/agent/skills/hub-pull.ts"],"sourcesContent":["/**\n * CLI / hub: install or update skills from git or archive (zip / tar.gz) into ~/.xopc/skills.\n */\n\nimport { execFileSync } from 'node:child_process';\nimport {\n  cpSync,\n  existsSync,\n  mkdtempSync,\n  mkdirSync,\n  readFileSync,\n  readdirSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from 'node:fs';\nimport { basename, join, normalize, resolve } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { fileURLToPath } from 'node:url';\n\nimport { fetch } from 'undici';\n\nimport { parseFrontmatter } from '../../markdown/frontmatter.js';\nimport { computeSkillTreeHashSync } from './hub-hash.js';\nimport { getSkillsLockEntry, recordSkillsHubInstall } from './hub-lock.js';\nimport type { SkillHubKind } from './hub-lock.js';\nimport {\n  installSkillFromZip,\n  isValidSkillId,\n  prepareManagedSkillTempDir,\n  promoteManagedSkillTempDir,\n} from './managed-store.js';\nimport { formatScanSummary, scanSkillDirectory } from './scanner.js';\n\nexport interface HubPullOptions {\n  skillId?: string;\n  ref?: string;\n  subpath?: string;\n  force?: boolean;\n  /** When true, critical scanner findings fail the install. */\n  strictScan?: boolean;\n}\n\nexport interface HubPullResult {\n  skillId: string;\n  path: string;\n  contentHash: string;\n  kind: SkillHubKind;\n  source: string;\n}\n\nexport function classifyHubSource(raw: string): 'git' | 'archive' {\n  const s = raw.trim();\n  const lower = s.toLowerCase();\n\n  try {\n    if (s.startsWith('file:')) {\n      const p = fileURLToPath(s);\n      const pl = p.toLowerCase();\n      if (pl.endsWith('.zip')) return 'archive';\n      if (pl.endsWith('.tar.gz') || pl.endsWith('.tgz')) return 'archive';\n      return 'git';\n    }\n  } catch {\n    // ignore invalid file URL\n  }\n\n  if (/^[a-zA-Z]:[\\\\/]/.test(s) || (s.startsWith('/') && !s.startsWith('//'))) {\n    if (lower.endsWith('.zip')) return 'archive';\n    if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) return 'archive';\n    return 'git';\n  }\n\n  try {\n    const u = new URL(s);\n    const path = u.pathname.toLowerCase();\n    if (path.endsWith('.zip')) return 'archive';\n    if (path.endsWith('.tar.gz') || path.endsWith('.tgz')) return 'archive';\n  } catch {\n    // not a URL\n  }\n\n  if (lower.endsWith('.zip')) return 'archive';\n  if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) return 'archive';\n  return 'git';\n}\n\nexport function findSkillRoot(repoRoot: string, subpath?: string): string {\n  const sub = subpath?.trim()\n    ? normalize(subpath.trim()).replace(/^[/\\\\]+/, '')\n    : '';\n  const base = sub ? resolve(repoRoot, sub) : resolve(repoRoot);\n  if (!existsSync(base)) {\n    throw new Error(`Path not found in source: ${sub || '.'}`);\n  }\n  if (existsSync(join(base, 'SKILL.md'))) {\n    return base;\n  }\n  const entries = readdirSync(base, { withFileTypes: true }).filter((e) => e.isDirectory());\n  if (entries.length === 1) {\n    const one = join(base, entries[0].name);\n    if (existsSync(join(one, 'SKILL.md'))) {\n      return one;\n    }\n  }\n  throw new Error(\n    'Could not locate SKILL.md (expected at root, under --path, or in a single child folder)',\n  );\n}\n\nfunction inferSkillIdFromSkillMd(skillRoot: string): string {\n  const raw = readFileSync(join(skillRoot, 'SKILL.md'), 'utf-8');\n  const { frontmatter } = parseFrontmatter(raw);\n  const n = String(frontmatter.name || '').trim();\n  if (n && isValidSkillId(n)) {\n    return n;\n  }\n  const dirName = basename(skillRoot);\n  if (isValidSkillId(dirName)) {\n    return dirName;\n  }\n  return '';\n}\n\nasync function runScan(dir: string, strict: boolean | undefined): Promise<void> {\n  const summary = await scanSkillDirectory(dir);\n  const label = basename(dir);\n  if (summary.critical > 0 && strict) {\n    throw new Error(\n      `Security scan reported ${summary.critical} critical finding(s). ${formatScanSummary(summary, label)}`,\n    );\n  }\n  if (summary.critical > 0 || summary.warn > 0) {\n    console.warn(formatScanSummary(summary, label));\n  }\n}\n\nasync function copySkillTreeToManaged(\n  skillRoot: string,\n  ctx: HubPullOptions & { kind: SkillHubKind; source: string },\n): Promise<HubPullResult> {\n  const targetId = ctx.skillId?.trim() || inferSkillIdFromSkillMd(skillRoot);\n  if (!targetId) {\n    throw new Error('Could not determine skill id: pass --id <name> (must match managed id rules)');\n  }\n  if (!isValidSkillId(targetId)) {\n    throw new Error(`Invalid skill id \"${targetId}\" (letters, digits, ._-; max 63 chars after first)`);\n  }\n\n  const { destDir, tempDir } = prepareManagedSkillTempDir(targetId);\n  try {\n    if (existsSync(destDir) && !ctx.force) {\n      throw new Error(`Skill \"${targetId}\" already exists. Use --force to replace.`);\n    }\n\n    cpSync(skillRoot, tempDir, { recursive: true });\n\n    if (!existsSync(join(tempDir, 'SKILL.md'))) {\n      throw new Error('Installed tree is missing SKILL.md');\n    }\n\n    await runScan(tempDir, ctx.strictScan);\n    const promoted = promoteManagedSkillTempDir({\n      skillId: targetId,\n      tempDir,\n      overwrite: ctx.force,\n    });\n    const hash = computeSkillTreeHashSync(promoted.path);\n    recordSkillsHubInstall(\n      targetId,\n      {\n        kind: ctx.kind,\n        source: ctx.source,\n        ref: ctx.kind === 'git' ? ctx.ref : undefined,\n        subpath: ctx.kind === 'git' ? ctx.subpath : undefined,\n      },\n      hash,\n    );\n\n    return {\n      skillId: targetId,\n      path: promoted.path,\n      contentHash: hash,\n      kind: ctx.kind,\n      source: ctx.source,\n    };\n  } catch (err) {\n    rmSync(tempDir, { recursive: true, force: true });\n    throw err;\n  }\n}\n\nasync function pullSkillFromZipBuffer(\n  buf: Buffer,\n  sourceLabel: string,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const r = installSkillFromZip(buf, {\n    skillId: options.skillId,\n    overwrite: options.force ?? false,\n  });\n  const hash = computeSkillTreeHashSync(r.path);\n  recordSkillsHubInstall(r.skillId, { kind: 'archive', source: sourceLabel }, hash);\n  await runScan(r.path, options.strictScan);\n  return {\n    skillId: r.skillId,\n    path: r.path,\n    contentHash: hash,\n    kind: 'archive',\n    source: sourceLabel,\n  };\n}\n\nasync function pullSkillFromTarFile(\n  archivePath: string,\n  sourceLabel: string,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-tar-'));\n  try {\n    execFileSync('tar', ['-xzf', archivePath, '-C', tmpRoot], {\n      stdio: 'pipe',\n      encoding: 'utf-8',\n    });\n    const skillRoot = findSkillRoot(tmpRoot);\n    return await copySkillTreeToManaged(skillRoot, { ...options, kind: 'archive', source: sourceLabel });\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\nasync function pullSkillFromLocalPath(absPath: string, options: HubPullOptions): Promise<HubPullResult> {\n  const resolved = resolve(absPath);\n  if (!existsSync(resolved)) {\n    throw new Error(`Not found: ${resolved}`);\n  }\n  const st = statSync(resolved);\n  if (!st.isFile()) {\n    throw new Error('Expected a path to a .zip or .tar.gz file (directories are not supported here)');\n  }\n  const lower = resolved.toLowerCase();\n  if (lower.endsWith('.zip')) {\n    const buf = readFileSync(resolved);\n    return pullSkillFromZipBuffer(buf, resolved, options);\n  }\n  if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) {\n    return pullSkillFromTarFile(resolved, resolved, options);\n  }\n  throw new Error('Unsupported file type (expected .zip, .tar.gz, or .tgz)');\n}\n\nasync function pullSkillFromGit(url: string, options: HubPullOptions): Promise<HubPullResult> {\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-hub-'));\n  const cloneDir = join(tmpRoot, 'clone');\n  try {\n    const args = ['clone', '--depth', '1'];\n    if (options.ref?.trim()) {\n      args.push('--branch', options.ref.trim());\n    }\n    args.push(url, cloneDir);\n    try {\n      execFileSync('git', args, { stdio: 'pipe', encoding: 'utf-8' });\n    } catch {\n      if (options.ref?.trim()) {\n        execFileSync('git', ['clone', '--depth', '1', url, cloneDir], {\n          stdio: 'pipe',\n          encoding: 'utf-8',\n        });\n      } else {\n        throw new Error(`git clone failed for ${url}`);\n      }\n    }\n    const skillRoot = findSkillRoot(cloneDir, options.subpath);\n    return await copySkillTreeToManaged(skillRoot, { ...options, kind: 'git', source: url });\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    if (msg.includes('ENOENT') || msg.includes('git clone failed')) {\n      throw new Error(\n        `Git operation failed (${msg}). Ensure git is installed and the repository URL is valid.`,\n      );\n    }\n    throw e;\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\n/**\n * Install or replace a skill from a git URL, http(s) archive URL, file:// URL, or local archive path.\n */\nexport async function pullSkillFromSource(\n  source: string,\n  options: HubPullOptions = {},\n): Promise<HubPullResult> {\n  const trimmed = source.trim();\n  if (!trimmed) {\n    throw new Error('Missing source URL or path');\n  }\n\n  if (trimmed.startsWith('file:')) {\n    return pullSkillFromLocalPath(fileURLToPath(trimmed), options);\n  }\n\n  if (!/^[a-zA-Z][a-zA-Z+.-]*:\\/\\//.test(trimmed) && existsSync(trimmed)) {\n    return pullSkillFromLocalPath(resolve(trimmed), options);\n  }\n\n  const kind = classifyHubSource(trimmed);\n  if (kind === 'archive') {\n    const res = await fetch(trimmed);\n    if (!res.ok) {\n      throw new Error(`HTTP ${res.status} while fetching archive`);\n    }\n    const buf = Buffer.from(await res.arrayBuffer());\n    const lower = trimmed.toLowerCase();\n    if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) {\n      const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-fetch-tar-'));\n      const f = join(tmpRoot, 'archive.tgz');\n      try {\n        mkdirSync(tmpRoot, { recursive: true });\n        writeFileSync(f, buf);\n        return await pullSkillFromTarFile(f, trimmed, options);\n      } finally {\n        rmSync(tmpRoot, { recursive: true, force: true });\n      }\n    }\n    return pullSkillFromZipBuffer(buf, trimmed, options);\n  }\n\n  return pullSkillFromGit(trimmed, options);\n}\n\n/** Re-install from the source recorded in ~/.xopc/skills-lock.json for this skill id. */\nexport async function updateSkillFromLock(\n  skillId: string,\n  options: Pick<HubPullOptions, 'strictScan'> = {},\n): Promise<HubPullResult> {\n  const e = getSkillsLockEntry(skillId);\n  if (!e) {\n    throw new Error(\n      `No hub lock entry for \"${skillId}\". Install with: xopc skills pull <git-or-archive-url>`,\n    );\n  }\n  return pullSkillFromSource(e.source, {\n    skillId,\n    ref: e.ref,\n    subpath: e.subpath,\n    force: true,\n    strictScan: options.strictScan,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmDA,SAAgB,kBAAkB,KAAgC;CAChE,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,QAAQ,EAAE,aAAa;AAE7B,KAAI;AACF,MAAI,EAAE,WAAW,QAAQ,EAAE;GAEzB,MAAM,KADI,cAAc,EACZ,CAAC,aAAa;AAC1B,OAAI,GAAG,SAAS,OAAO,CAAE,QAAO;AAChC,OAAI,GAAG,SAAS,UAAU,IAAI,GAAG,SAAS,OAAO,CAAE,QAAO;AAC1D,UAAO;;SAEH;AAIR,KAAI,kBAAkB,KAAK,EAAE,IAAK,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,WAAW,KAAK,EAAG;AAC3E,MAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AACnC,MAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AAChE,SAAO;;AAGT,KAAI;EAEF,MAAM,OAAO,IADC,IAAI,EACJ,CAAC,SAAS,aAAa;AACrC,MAAI,KAAK,SAAS,OAAO,CAAE,QAAO;AAClC,MAAI,KAAK,SAAS,UAAU,IAAI,KAAK,SAAS,OAAO,CAAE,QAAO;SACxD;AAIR,KAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AACnC,KAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AAChE,QAAO;;AAGT,SAAgB,cAAc,UAAkB,SAA0B;CACxE,MAAM,MAAM,SAAS,MAAM,GACvB,UAAU,QAAQ,MAAM,CAAC,CAAC,QAAQ,WAAW,GAAG,GAChD;CACJ,MAAM,OAAO,MAAM,QAAQ,UAAU,IAAI,GAAG,QAAQ,SAAS;AAC7D,KAAI,CAAC,WAAW,KAAK,CACnB,OAAM,IAAI,MAAM,6BAA6B,OAAO,MAAM;AAE5D,KAAI,WAAW,KAAK,MAAM,WAAW,CAAC,CACpC,QAAO;CAET,MAAM,UAAU,YAAY,MAAM,EAAE,eAAe,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,aAAa,CAAC;AACzF,KAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,MAAM,KAAK,MAAM,QAAQ,GAAG,KAAK;AACvC,MAAI,WAAW,KAAK,KAAK,WAAW,CAAC,CACnC,QAAO;;AAGX,OAAM,IAAI,MACR,0FACD;;AAGH,SAAS,wBAAwB,WAA2B;CAE1D,MAAM,EAAE,gBAAgB,iBADZ,aAAa,KAAK,WAAW,WAAW,EAAE,QACV,CAAC;CAC7C,MAAM,IAAI,OAAO,YAAY,QAAQ,GAAG,CAAC,MAAM;AAC/C,KAAI,KAAK,eAAe,EAAE,CACxB,QAAO;CAET,MAAM,UAAU,SAAS,UAAU;AACnC,KAAI,eAAe,QAAQ,CACzB,QAAO;AAET,QAAO;;AAGT,eAAe,QAAQ,KAAa,QAA4C;CAC9E,MAAM,UAAU,MAAM,mBAAmB,IAAI;CAC7C,MAAM,QAAQ,SAAS,IAAI;AAC3B,KAAI,QAAQ,WAAW,KAAK,OAC1B,OAAM,IAAI,MACR,0BAA0B,QAAQ,SAAS,wBAAwB,kBAAkB,SAAS,MAAM,GACrG;AAEH,KAAI,QAAQ,WAAW,KAAK,QAAQ,OAAO,EACzC,SAAQ,KAAK,kBAAkB,SAAS,MAAM,CAAC;;AAInD,eAAe,uBACb,WACA,KACwB;CACxB,MAAM,WAAW,IAAI,SAAS,MAAM,IAAI,wBAAwB,UAAU;AAC1E,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,+EAA+E;AAEjG,KAAI,CAAC,eAAe,SAAS,CAC3B,OAAM,IAAI,MAAM,qBAAqB,SAAS,oDAAoD;CAGpG,MAAM,EAAE,SAAS,YAAY,2BAA2B,SAAS;AACjE,KAAI;AACF,MAAI,WAAW,QAAQ,IAAI,CAAC,IAAI,MAC9B,OAAM,IAAI,MAAM,UAAU,SAAS,2CAA2C;AAGhF,SAAO,WAAW,SAAS,EAAE,WAAW,MAAM,CAAC;AAE/C,MAAI,CAAC,WAAW,KAAK,SAAS,WAAW,CAAC,CACxC,OAAM,IAAI,MAAM,qCAAqC;AAGvD,QAAM,QAAQ,SAAS,IAAI,WAAW;EACtC,MAAM,WAAW,2BAA2B;GAC1C,SAAS;GACT;GACA,WAAW,IAAI;GAChB,CAAC;EACF,MAAM,OAAO,yBAAyB,SAAS,KAAK;AACpD,yBACE,UACA;GACE,MAAM,IAAI;GACV,QAAQ,IAAI;GACZ,KAAK,IAAI,SAAS,QAAQ,IAAI,MAAM,KAAA;GACpC,SAAS,IAAI,SAAS,QAAQ,IAAI,UAAU,KAAA;GAC7C,EACD,KACD;AAED,SAAO;GACL,SAAS;GACT,MAAM,SAAS;GACf,aAAa;GACb,MAAM,IAAI;GACV,QAAQ,IAAI;GACb;UACM,KAAK;AACZ,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACjD,QAAM;;;AAIV,eAAe,uBACb,KACA,aACA,SACwB;CACxB,MAAM,IAAI,oBAAoB,KAAK;EACjC,SAAS,QAAQ;EACjB,WAAW,QAAQ,SAAS;EAC7B,CAAC;CACF,MAAM,OAAO,yBAAyB,EAAE,KAAK;AAC7C,wBAAuB,EAAE,SAAS;EAAE,MAAM;EAAW,QAAQ;EAAa,EAAE,KAAK;AACjF,OAAM,QAAQ,EAAE,MAAM,QAAQ,WAAW;AACzC,QAAO;EACL,SAAS,EAAE;EACX,MAAM,EAAE;EACR,aAAa;EACb,MAAM;EACN,QAAQ;EACT;;AAGH,eAAe,qBACb,aACA,aACA,SACwB;CACxB,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;AACxD,KAAI;AACF,eAAa,OAAO;GAAC;GAAQ;GAAa;GAAM;GAAQ,EAAE;GACxD,OAAO;GACP,UAAU;GACX,CAAC;AAEF,SAAO,MAAM,uBADK,cAAc,QACa,EAAE;GAAE,GAAG;GAAS,MAAM;GAAW,QAAQ;GAAa,CAAC;WAC5F;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAIrD,eAAe,uBAAuB,SAAiB,SAAiD;CACtG,MAAM,WAAW,QAAQ,QAAQ;AACjC,KAAI,CAAC,WAAW,SAAS,CACvB,OAAM,IAAI,MAAM,cAAc,WAAW;AAG3C,KAAI,CADO,SAAS,SACb,CAAC,QAAQ,CACd,OAAM,IAAI,MAAM,iFAAiF;CAEnG,MAAM,QAAQ,SAAS,aAAa;AACpC,KAAI,MAAM,SAAS,OAAO,CAExB,QAAO,uBADK,aAAa,SACQ,EAAE,UAAU,QAAQ;AAEvD,KAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CACrD,QAAO,qBAAqB,UAAU,UAAU,QAAQ;AAE1D,OAAM,IAAI,MAAM,0DAA0D;;AAG5E,eAAe,iBAAiB,KAAa,SAAiD;CAC5F,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;CACxD,MAAM,WAAW,KAAK,SAAS,QAAQ;AACvC,KAAI;EACF,MAAM,OAAO;GAAC;GAAS;GAAW;GAAI;AACtC,MAAI,QAAQ,KAAK,MAAM,CACrB,MAAK,KAAK,YAAY,QAAQ,IAAI,MAAM,CAAC;AAE3C,OAAK,KAAK,KAAK,SAAS;AACxB,MAAI;AACF,gBAAa,OAAO,MAAM;IAAE,OAAO;IAAQ,UAAU;IAAS,CAAC;UACzD;AACN,OAAI,QAAQ,KAAK,MAAM,CACrB,cAAa,OAAO;IAAC;IAAS;IAAW;IAAK;IAAK;IAAS,EAAE;IAC5D,OAAO;IACP,UAAU;IACX,CAAC;OAEF,OAAM,IAAI,MAAM,wBAAwB,MAAM;;AAIlD,SAAO,MAAM,uBADK,cAAc,UAAU,QAAQ,QACL,EAAE;GAAE,GAAG;GAAS,MAAM;GAAO,QAAQ;GAAK,CAAC;UACjF,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,IAAI,SAAS,SAAS,IAAI,IAAI,SAAS,mBAAmB,CAC5D,OAAM,IAAI,MACR,yBAAyB,IAAI,6DAC9B;AAEH,QAAM;WACE;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;;;;AAOrD,eAAsB,oBACpB,QACA,UAA0B,EAAE,EACJ;CACxB,MAAM,UAAU,OAAO,MAAM;AAC7B,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,6BAA6B;AAG/C,KAAI,QAAQ,WAAW,QAAQ,CAC7B,QAAO,uBAAuB,cAAc,QAAQ,EAAE,QAAQ;AAGhE,KAAI,CAAC,6BAA6B,KAAK,QAAQ,IAAI,WAAW,QAAQ,CACpE,QAAO,uBAAuB,QAAQ,QAAQ,EAAE,QAAQ;AAI1D,KADa,kBAAkB,QACvB,KAAK,WAAW;EACtB,MAAM,MAAM,MAAM,MAAM,QAAQ;AAChC,MAAI,CAAC,IAAI,GACP,OAAM,IAAI,MAAM,QAAQ,IAAI,OAAO,yBAAyB;EAE9D,MAAM,MAAM,OAAO,KAAK,MAAM,IAAI,aAAa,CAAC;EAChD,MAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,EAAE;GACvD,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,kBAAkB,CAAC;GAC9D,MAAM,IAAI,KAAK,SAAS,cAAc;AACtC,OAAI;AACF,cAAU,SAAS,EAAE,WAAW,MAAM,CAAC;AACvC,kBAAc,GAAG,IAAI;AACrB,WAAO,MAAM,qBAAqB,GAAG,SAAS,QAAQ;aAC9C;AACR,WAAO,SAAS;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;;;AAGrD,SAAO,uBAAuB,KAAK,SAAS,QAAQ;;AAGtD,QAAO,iBAAiB,SAAS,QAAQ;;;AAI3C,eAAsB,oBACpB,SACA,UAA8C,EAAE,EACxB;CACxB,MAAM,IAAI,mBAAmB,QAAQ;AACrC,KAAI,CAAC,EACH,OAAM,IAAI,MACR,0BAA0B,QAAQ,wDACnC;AAEH,QAAO,oBAAoB,EAAE,QAAQ;EACnC;EACA,KAAK,EAAE;EACP,SAAS,EAAE;EACX,OAAO;EACP,YAAY,QAAQ;EACrB,CAAC"}
+{"version":3,"file":"hub-pull.js","names":[],"sources":["../../../../src/agent/skills/hub-pull.ts"],"sourcesContent":["/**\n * CLI / hub: install or update skills from git or archive (zip / tar.gz) into ~/.xopc/skills.\n */\n\nimport { execFileSync } from 'node:child_process';\nimport AdmZip from 'adm-zip';\nimport {\n  cpSync,\n  existsSync,\n  mkdtempSync,\n  mkdirSync,\n  readFileSync,\n  readdirSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from 'node:fs';\nimport { basename, dirname, join, normalize, resolve, sep } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { fileURLToPath } from 'node:url';\n\nimport { fetch } from 'undici';\n\nimport { parseFrontmatter } from '../../markdown/frontmatter.js';\nimport { computeSkillTreeHashSync } from './hub-hash.js';\nimport { getSkillsLockEntry, recordSkillsHubInstall } from './hub-lock.js';\nimport type { SkillHubKind } from './hub-lock.js';\nimport {\n  installSkillFromZip,\n  isIgnorableZipEntry,\n  isValidSkillId,\n  prepareManagedSkillTempDir,\n  promoteManagedSkillTempDir,\n} from './managed-store.js';\nimport { formatScanSummary, scanSkillDirectory } from './scanner.js';\n\nexport interface HubPullOptions {\n  skillId?: string;\n  ref?: string;\n  subpath?: string;\n  force?: boolean;\n  /** Destination skills root. Defaults to the global managed skills directory. */\n  installRoot?: string;\n  /** Hub lock path. Defaults to the global skills-lock.json. */\n  lockPath?: string;\n  /** When true, critical scanner findings fail the install. */\n  strictScan?: boolean;\n}\n\nexport interface HubPullResult {\n  skillId: string;\n  path: string;\n  contentHash: string;\n  kind: SkillHubKind;\n  source: string;\n}\n\ninterface GitHubSkillSource {\n  owner: string;\n  repo: string;\n  cloneUrl: string;\n  sourceLabel: string;\n  ref?: string;\n  subpath?: string;\n  treePathParts?: string[];\n}\n\nclass GitHubArchiveDownloadError extends Error {\n  constructor(\n    message: string,\n    readonly status?: number,\n  ) {\n    super(message);\n    this.name = 'GitHubArchiveDownloadError';\n  }\n}\n\nfunction githubHeaders(): Record<string, string> {\n  const headers: Record<string, string> = {\n    Accept: 'application/vnd.github+json',\n    'User-Agent': 'xopc-skill-installer',\n  };\n  const token = process.env.GITHUB_TOKEN || process.env.GH_TOKEN;\n  if (token?.trim()) {\n    headers.Authorization = `Bearer ${token.trim()}`;\n  }\n  return headers;\n}\n\nfunction normalizeSourceSubpath(subpath?: string): string | undefined {\n  const raw = subpath?.trim().replace(/\\\\/g, '/').replace(/^\\/+/, '');\n  if (!raw || raw === '.') return undefined;\n  if (/^[a-zA-Z]:/.test(raw)) {\n    throw new Error(`Invalid source path: ${subpath}`);\n  }\n  const normalized = normalize(raw);\n  if (normalized === '..' || normalized.startsWith(`..${sep}`) || resolve('/', normalized) === resolve('/')) {\n    throw new Error(`Invalid source path: ${subpath}`);\n  }\n  return normalized.replace(/\\\\/g, '/');\n}\n\nfunction decodeUrlPathPart(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n\nfunction parseSshGitHubSource(\n  raw: string,\n  optionRef?: string,\n  optionSubpath?: string,\n): GitHubSkillSource | undefined {\n  const ssh = raw.match(/^git@github\\.com:([^/]+)\\/(.+?)(?:\\.git)?$/i);\n  if (!ssh) return undefined;\n  const owner = ssh[1];\n  const repo = ssh[2].replace(/\\.git$/i, '');\n  return {\n    owner,\n    repo,\n    cloneUrl: `https://github.com/${owner}/${repo}.git`,\n    sourceLabel: raw,\n    ref: optionRef,\n    subpath: optionSubpath,\n  };\n}\n\nexport function parseGitHubSkillSource(\n  raw: string,\n  options: Pick<HubPullOptions, 'ref' | 'subpath'> = {},\n): GitHubSkillSource | undefined {\n  const optionRef = options.ref?.trim() || undefined;\n  const optionSubpath = normalizeSourceSubpath(options.subpath);\n  const sshSource = parseSshGitHubSource(raw, optionRef, optionSubpath);\n  if (sshSource) return sshSource;\n\n  let url: URL;\n  try {\n    url = new URL(raw);\n  } catch {\n    return undefined;\n  }\n  if (url.protocol !== 'https:' && url.protocol !== 'http:') return undefined;\n  if (url.hostname.toLowerCase() !== 'github.com') return undefined;\n\n  const parts = url.pathname.split('/').filter(Boolean).map(decodeUrlPathPart);\n  if (parts.length < 2) return undefined;\n\n  const owner = parts[0];\n  const repo = parts[1].replace(/\\.git$/i, '');\n  if (!owner || !repo) return undefined;\n\n    let ref: string | undefined;\n    let subpath: string | undefined;\n    let treePathParts: string[] | undefined;\n    const marker = parts[2]?.toLowerCase();\n    if ((marker === 'tree' || marker === 'blob') && parts[3]) {\n      treePathParts = parts.slice(3);\n      ref = treePathParts[0];\n      subpath = normalizeSourceSubpath(treePathParts.slice(1).join('/'));\n  } else if (parts.length > 2 && !parts[1].toLowerCase().endsWith('.git')) {\n    subpath = normalizeSourceSubpath(parts.slice(2).join('/'));\n  }\n\n  return {\n    owner,\n    repo,\n    cloneUrl: `https://github.com/${owner}/${repo}.git`,\n    sourceLabel: raw,\n    ref: optionRef || ref,\n    subpath: optionSubpath || subpath,\n    treePathParts,\n  };\n}\n\nexport function classifyHubSource(raw: string): 'git' | 'archive' {\n  const s = raw.trim();\n  const lower = s.toLowerCase();\n\n  try {\n    if (s.startsWith('file:')) {\n      const p = fileURLToPath(s);\n      const pl = p.toLowerCase();\n      if (pl.endsWith('.zip')) return 'archive';\n      if (pl.endsWith('.tar.gz') || pl.endsWith('.tgz')) return 'archive';\n      return 'git';\n    }\n  } catch {\n    // ignore invalid file URL\n  }\n\n  if (/^[a-zA-Z]:[\\\\/]/.test(s) || (s.startsWith('/') && !s.startsWith('//'))) {\n    if (lower.endsWith('.zip')) return 'archive';\n    if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) return 'archive';\n    return 'git';\n  }\n\n  try {\n    const u = new URL(s);\n    const path = u.pathname.toLowerCase();\n    if (path.endsWith('.zip')) return 'archive';\n    if (path.endsWith('.tar.gz') || path.endsWith('.tgz')) return 'archive';\n  } catch {\n    // not a URL\n  }\n\n  if (lower.endsWith('.zip')) return 'archive';\n  if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) return 'archive';\n  return 'git';\n}\n\nexport function findSkillRoot(repoRoot: string, subpath?: string): string {\n  const sub = normalizeSourceSubpath(subpath) || '';\n  const root = resolve(repoRoot);\n  const base = sub ? resolve(root, sub) : root;\n  if (base !== root && !base.startsWith(root + sep)) {\n    throw new Error(`Invalid source path: ${subpath}`);\n  }\n  if (!existsSync(base)) {\n    throw new Error(`Path not found in source: ${sub || '.'}`);\n  }\n  if (existsSync(join(base, 'SKILL.md'))) {\n    return base;\n  }\n  const entries = readdirSync(base, { withFileTypes: true }).filter((e) => e.isDirectory());\n  if (entries.length === 1) {\n    const one = join(base, entries[0].name);\n    if (existsSync(join(one, 'SKILL.md'))) {\n      return one;\n    }\n  }\n  throw new Error(\n    'Could not locate SKILL.md (expected at root, under --path, or in a single child folder)',\n  );\n}\n\nfunction inferSkillIdFromSkillMd(skillRoot: string): string {\n  const raw = readFileSync(join(skillRoot, 'SKILL.md'), 'utf-8');\n  const { frontmatter } = parseFrontmatter(raw);\n  const n = String(frontmatter.name || '').trim();\n  if (n && isValidSkillId(n)) {\n    return n;\n  }\n  const dirName = basename(skillRoot);\n  if (isValidSkillId(dirName)) {\n    return dirName;\n  }\n  return '';\n}\n\nasync function runScan(dir: string, strict: boolean | undefined): Promise<void> {\n  const summary = await scanSkillDirectory(dir);\n  const label = basename(dir);\n  if (summary.critical > 0 && strict) {\n    throw new Error(\n      `Security scan reported ${summary.critical} critical finding(s). ${formatScanSummary(summary, label)}`,\n    );\n  }\n  if (summary.critical > 0 || summary.warn > 0) {\n    console.warn(formatScanSummary(summary, label));\n  }\n}\n\nasync function copySkillTreeToManaged(\n  skillRoot: string,\n  ctx: HubPullOptions & { kind: SkillHubKind; source: string },\n): Promise<HubPullResult> {\n  const targetId = ctx.skillId?.trim() || inferSkillIdFromSkillMd(skillRoot);\n  if (!targetId) {\n    throw new Error('Could not determine skill id: pass --id <name> (must match managed id rules)');\n  }\n  if (!isValidSkillId(targetId)) {\n    throw new Error(`Invalid skill id \"${targetId}\" (letters, digits, ._-; max 63 chars after first)`);\n  }\n\n  const { destDir, tempDir } = prepareManagedSkillTempDir(targetId, ctx.installRoot);\n  try {\n    if (existsSync(destDir) && !ctx.force) {\n      throw new Error(`Skill \"${targetId}\" already exists. Use --force to replace.`);\n    }\n\n    cpSync(skillRoot, tempDir, { recursive: true });\n\n    if (!existsSync(join(tempDir, 'SKILL.md'))) {\n      throw new Error('Installed tree is missing SKILL.md');\n    }\n\n    await runScan(tempDir, ctx.strictScan);\n    const promoted = promoteManagedSkillTempDir({\n      skillId: targetId,\n      tempDir,\n      overwrite: ctx.force,\n      rootDir: ctx.installRoot,\n    });\n    const hash = computeSkillTreeHashSync(promoted.path);\n    recordSkillsHubInstall(\n      targetId,\n      {\n        kind: ctx.kind,\n        source: ctx.source,\n        ref: ctx.kind === 'git' ? ctx.ref : undefined,\n        subpath: ctx.kind === 'git' ? ctx.subpath : undefined,\n      },\n      hash,\n      ctx.lockPath,\n    );\n\n    return {\n      skillId: targetId,\n      path: promoted.path,\n      contentHash: hash,\n      kind: ctx.kind,\n      source: ctx.source,\n    };\n  } catch (err) {\n    rmSync(tempDir, { recursive: true, force: true });\n    throw err;\n  }\n}\n\nasync function pullSkillFromZipBuffer(\n  buf: Buffer,\n  sourceLabel: string,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const r = installSkillFromZip(buf, {\n    skillId: options.skillId,\n    overwrite: options.force ?? false,\n    rootDir: options.installRoot,\n  });\n  const hash = computeSkillTreeHashSync(r.path);\n  recordSkillsHubInstall(r.skillId, { kind: 'archive', source: sourceLabel }, hash, options.lockPath);\n  await runScan(r.path, options.strictScan);\n  return {\n    skillId: r.skillId,\n    path: r.path,\n    contentHash: hash,\n    kind: 'archive',\n    source: sourceLabel,\n  };\n}\n\nasync function pullSkillFromTarFile(\n  archivePath: string,\n  sourceLabel: string,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-tar-'));\n  try {\n    execFileSync('tar', ['-xzf', archivePath, '-C', tmpRoot], {\n      stdio: 'pipe',\n      encoding: 'utf-8',\n    });\n    const skillRoot = findSkillRoot(tmpRoot);\n    return await copySkillTreeToManaged(skillRoot, { ...options, kind: 'archive', source: sourceLabel });\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\nfunction isSafeArchivePath(name: string): boolean {\n  if (!name) return false;\n  const normalized = name.replace(/\\\\/g, '/').replace(/\\/+$/, '');\n  if (normalized.startsWith('/') || /^[a-zA-Z]:/.test(normalized)) return false;\n  return normalized.split('/').every((part) => part && part !== '..');\n}\n\nfunction extractZipBufferToTempDir(buf: Buffer, tmpRoot: string): void {\n  const zip = new AdmZip(buf);\n  const rootResolved = resolve(tmpRoot);\n  for (const entry of zip.getEntries()) {\n    const normalized = entry.entryName.replace(/\\\\/g, '/');\n    if (!normalized || isIgnorableZipEntry(normalized)) continue;\n    if (!isSafeArchivePath(normalized)) {\n      throw new Error(`Unsafe zip entry path: ${entry.entryName}`);\n    }\n\n    const target = join(tmpRoot, normalized);\n    const targetResolved = resolve(target);\n    if (targetResolved !== rootResolved && !targetResolved.startsWith(rootResolved + sep)) {\n      throw new Error(`Unsafe zip entry path: ${entry.entryName}`);\n    }\n\n    if (entry.isDirectory) {\n      mkdirSync(target, { recursive: true });\n      continue;\n    }\n    mkdirSync(dirname(target), { recursive: true });\n    writeFileSync(target, entry.getData());\n  }\n}\n\nfunction findExtractedRepositoryRoot(tmpRoot: string): string {\n  const entries = readdirSync(tmpRoot, { withFileTypes: true }).filter((entry) => !entry.name.startsWith('.'));\n  const dirs = entries.filter((entry) => entry.isDirectory());\n  const files = entries.filter((entry) => entry.isFile());\n  if (dirs.length === 1 && files.length === 0) {\n    return join(tmpRoot, dirs[0].name);\n  }\n  return tmpRoot;\n}\n\nasync function resolveGitHubDefaultBranch(source: GitHubSkillSource): Promise<string | undefined> {\n  const apiUrl = `https://api.github.com/repos/${source.owner}/${source.repo}`;\n  try {\n    const res = await fetch(apiUrl, { headers: githubHeaders() });\n    if (!res.ok) return undefined;\n    const body = (await res.json()) as { default_branch?: unknown };\n    const branch = typeof body.default_branch === 'string' ? body.default_branch.trim() : '';\n    return branch || undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function githubRefExists(\n  source: GitHubSkillSource,\n  namespace: 'heads' | 'tags',\n  ref: string,\n): Promise<boolean> {\n  const url = `https://api.github.com/repos/${source.owner}/${source.repo}/git/ref/${namespace}/${encodeURI(ref)}`;\n  try {\n    const res = await fetch(url, { headers: githubHeaders() });\n    return res.ok;\n  } catch {\n    return false;\n  }\n}\n\nasync function resolveGitHubTreeRefAndSubpath(\n  source: GitHubSkillSource,\n  options: HubPullOptions,\n): Promise<{ ref?: string; subpath?: string }> {\n  const optionRef = options.ref?.trim() || undefined;\n  const optionSubpath = options.subpath || undefined;\n  if (optionRef || !source.treePathParts?.length) {\n    return {\n      ref: optionRef || source.ref,\n      subpath: optionSubpath || source.subpath,\n    };\n  }\n\n  for (let i = source.treePathParts.length; i >= 1; i -= 1) {\n    const candidate = source.treePathParts.slice(0, i).join('/');\n    if (\n      (await githubRefExists(source, 'heads', candidate)) ||\n      (await githubRefExists(source, 'tags', candidate))\n    ) {\n      return {\n        ref: candidate,\n        subpath: optionSubpath || normalizeSourceSubpath(source.treePathParts.slice(i).join('/')),\n      };\n    }\n  }\n\n  return {\n    ref: source.ref,\n    subpath: optionSubpath || source.subpath,\n  };\n}\n\nasync function pullSkillFromGitHubArchive(\n  source: GitHubSkillSource,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const ref = options.ref?.trim() || (await resolveGitHubDefaultBranch(source)) || 'main';\n  const zipUrl = `https://codeload.github.com/${source.owner}/${source.repo}/zip/${encodeURI(ref)}`;\n  const res = await fetch(zipUrl, { headers: githubHeaders() });\n  if (!res.ok) {\n    throw new GitHubArchiveDownloadError(`HTTP ${res.status} while fetching GitHub archive`, res.status);\n  }\n\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-github-zip-'));\n  try {\n    const buf = Buffer.from(await res.arrayBuffer());\n    extractZipBufferToTempDir(buf, tmpRoot);\n    const repoRoot = findExtractedRepositoryRoot(tmpRoot);\n    const effectiveOptions = { ...options, ref, subpath: options.subpath || source.subpath };\n    const skillRoot = findSkillRoot(repoRoot, effectiveOptions.subpath);\n    return await copySkillTreeToManaged(skillRoot, {\n      ...effectiveOptions,\n      kind: 'git',\n      source: source.sourceLabel,\n    });\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\nasync function pullSkillFromGitHubSparse(\n  source: GitHubSkillSource,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const subpath = normalizeSourceSubpath(options.subpath || source.subpath);\n  if (!subpath) {\n    return pullSkillFromGit(source.cloneUrl, options, source.sourceLabel);\n  }\n\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-github-sparse-'));\n  const cloneDir = join(tmpRoot, 'clone');\n  let clonedRef = options.ref?.trim() || undefined;\n  try {\n    const args = ['clone', '--depth', '1', '--filter=blob:none', '--sparse'];\n    if (clonedRef) {\n      args.push('--branch', clonedRef);\n    }\n    args.push(source.cloneUrl, cloneDir);\n    try {\n      execFileSync('git', args, { stdio: 'pipe', encoding: 'utf-8' });\n    } catch {\n      if (!clonedRef) throw new Error(`git clone failed for ${source.cloneUrl}`);\n      clonedRef = undefined;\n      execFileSync(\n        'git',\n        ['clone', '--depth', '1', '--filter=blob:none', '--sparse', source.cloneUrl, cloneDir],\n        { stdio: 'pipe', encoding: 'utf-8' },\n      );\n    }\n\n    execFileSync('git', ['-C', cloneDir, 'sparse-checkout', 'set', '--no-cone', subpath], {\n      stdio: 'pipe',\n      encoding: 'utf-8',\n    });\n    const effectiveOptions = { ...options, subpath, ref: clonedRef };\n    const skillRoot = findSkillRoot(cloneDir, subpath);\n    return await copySkillTreeToManaged(skillRoot, {\n      ...effectiveOptions,\n      kind: 'git',\n      source: source.sourceLabel,\n    });\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    if (msg.includes('ENOENT') || msg.includes('git clone failed')) {\n      throw new Error(\n        `Git operation failed (${msg}). Ensure git is installed and the repository URL is valid.`,\n      );\n    }\n    throw e;\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\nasync function pullSkillFromGitHub(\n  source: GitHubSkillSource,\n  options: HubPullOptions,\n): Promise<HubPullResult> {\n  const resolved = await resolveGitHubTreeRefAndSubpath(source, options);\n  const effectiveOptions = {\n    ...options,\n    ref: resolved.ref,\n    subpath: resolved.subpath,\n  };\n  try {\n    return await pullSkillFromGitHubArchive(source, effectiveOptions);\n  } catch (archiveErr) {\n    try {\n      return await pullSkillFromGitHubSparse(source, effectiveOptions);\n    } catch (gitErr) {\n      const archiveMsg = archiveErr instanceof Error ? archiveErr.message : String(archiveErr);\n      const gitMsg = gitErr instanceof Error ? gitErr.message : String(gitErr);\n      throw new Error(`GitHub archive install failed (${archiveMsg}); git fallback failed (${gitMsg})`);\n    }\n  }\n}\n\nasync function pullSkillFromLocalPath(absPath: string, options: HubPullOptions): Promise<HubPullResult> {\n  const resolved = resolve(absPath);\n  if (!existsSync(resolved)) {\n    throw new Error(`Not found: ${resolved}`);\n  }\n  const st = statSync(resolved);\n  if (!st.isFile()) {\n    throw new Error('Expected a path to a .zip or .tar.gz file (directories are not supported here)');\n  }\n  const lower = resolved.toLowerCase();\n  if (lower.endsWith('.zip')) {\n    const buf = readFileSync(resolved);\n    return pullSkillFromZipBuffer(buf, resolved, options);\n  }\n  if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) {\n    return pullSkillFromTarFile(resolved, resolved, options);\n  }\n  throw new Error('Unsupported file type (expected .zip, .tar.gz, or .tgz)');\n}\n\nasync function pullSkillFromGit(\n  url: string,\n  options: HubPullOptions,\n  sourceLabel = url,\n): Promise<HubPullResult> {\n  const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-hub-'));\n  const cloneDir = join(tmpRoot, 'clone');\n  let clonedRef = options.ref?.trim() || undefined;\n  try {\n    const args = ['clone', '--depth', '1'];\n    if (clonedRef) {\n      args.push('--branch', clonedRef);\n    }\n    args.push(url, cloneDir);\n    try {\n      execFileSync('git', args, { stdio: 'pipe', encoding: 'utf-8' });\n    } catch {\n      if (clonedRef) {\n        clonedRef = undefined;\n        execFileSync('git', ['clone', '--depth', '1', url, cloneDir], {\n          stdio: 'pipe',\n          encoding: 'utf-8',\n        });\n      } else {\n        throw new Error(`git clone failed for ${url}`);\n      }\n    }\n    const skillRoot = findSkillRoot(cloneDir, options.subpath);\n    return await copySkillTreeToManaged(skillRoot, {\n      ...options,\n      ref: clonedRef,\n      kind: 'git',\n      source: sourceLabel,\n    });\n  } catch (e) {\n    const msg = e instanceof Error ? e.message : String(e);\n    if (msg.includes('ENOENT') || msg.includes('git clone failed')) {\n      throw new Error(\n        `Git operation failed (${msg}). Ensure git is installed and the repository URL is valid.`,\n      );\n    }\n    throw e;\n  } finally {\n    rmSync(tmpRoot, { recursive: true, force: true });\n  }\n}\n\n/**\n * Install or replace a skill from a git URL, http(s) archive URL, file:// URL, or local archive path.\n */\nexport async function pullSkillFromSource(\n  source: string,\n  options: HubPullOptions = {},\n): Promise<HubPullResult> {\n  const trimmed = source.trim();\n  if (!trimmed) {\n    throw new Error('Missing source URL or path');\n  }\n\n  if (trimmed.startsWith('file:')) {\n    return pullSkillFromLocalPath(fileURLToPath(trimmed), options);\n  }\n\n  if (!/^[a-zA-Z][a-zA-Z+.-]*:\\/\\//.test(trimmed) && existsSync(trimmed)) {\n    return pullSkillFromLocalPath(resolve(trimmed), options);\n  }\n\n  const githubSource = parseGitHubSkillSource(trimmed, options);\n  if (githubSource) {\n    return pullSkillFromGitHub(githubSource, options);\n  }\n\n  const kind = classifyHubSource(trimmed);\n  if (kind === 'archive') {\n    const res = await fetch(trimmed);\n    if (!res.ok) {\n      throw new Error(`HTTP ${res.status} while fetching archive`);\n    }\n    const buf = Buffer.from(await res.arrayBuffer());\n    const lower = trimmed.toLowerCase();\n    if (lower.endsWith('.tar.gz') || lower.endsWith('.tgz')) {\n      const tmpRoot = mkdtempSync(join(tmpdir(), 'xopc-fetch-tar-'));\n      const f = join(tmpRoot, 'archive.tgz');\n      try {\n        mkdirSync(tmpRoot, { recursive: true });\n        writeFileSync(f, buf);\n        return await pullSkillFromTarFile(f, trimmed, options);\n      } finally {\n        rmSync(tmpRoot, { recursive: true, force: true });\n      }\n    }\n    return pullSkillFromZipBuffer(buf, trimmed, options);\n  }\n\n  return pullSkillFromGit(trimmed, options);\n}\n\n/** Re-install from the source recorded in ~/.xopc/skills-lock.json for this skill id. */\nexport async function updateSkillFromLock(\n  skillId: string,\n  options: Pick<HubPullOptions, 'strictScan'> = {},\n): Promise<HubPullResult> {\n  const e = getSkillsLockEntry(skillId);\n  if (!e) {\n    throw new Error(\n      `No hub lock entry for \"${skillId}\". Install with: xopc skills pull <git-or-archive-url>`,\n    );\n  }\n  return pullSkillFromSource(e.source, {\n    skillId,\n    ref: e.ref,\n    subpath: e.subpath,\n    force: true,\n    strictScan: options.strictScan,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAmEA,IAAM,6BAAN,cAAyC,MAAM;CAC7C,YACE,SACA,QACA;AACA,QAAM,QAAQ;AAFL,OAAA,SAAA;AAGT,OAAK,OAAO;;;AAIhB,SAAS,gBAAwC;CAC/C,MAAM,UAAkC;EACtC,QAAQ;EACR,cAAc;EACf;CACD,MAAM,QAAQ,QAAQ,IAAI,gBAAgB,QAAQ,IAAI;AACtD,KAAI,OAAO,MAAM,CACf,SAAQ,gBAAgB,UAAU,MAAM,MAAM;AAEhD,QAAO;;AAGT,SAAS,uBAAuB,SAAsC;CACpE,MAAM,MAAM,SAAS,MAAM,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AACnE,KAAI,CAAC,OAAO,QAAQ,IAAK,QAAO,KAAA;AAChC,KAAI,aAAa,KAAK,IAAI,CACxB,OAAM,IAAI,MAAM,wBAAwB,UAAU;CAEpD,MAAM,aAAa,UAAU,IAAI;AACjC,KAAI,eAAe,QAAQ,WAAW,WAAW,KAAK,MAAM,IAAI,QAAQ,KAAK,WAAW,KAAK,QAAQ,IAAI,CACvG,OAAM,IAAI,MAAM,wBAAwB,UAAU;AAEpD,QAAO,WAAW,QAAQ,OAAO,IAAI;;AAGvC,SAAS,kBAAkB,OAAuB;AAChD,KAAI;AACF,SAAO,mBAAmB,MAAM;SAC1B;AACN,SAAO;;;AAIX,SAAS,qBACP,KACA,WACA,eAC+B;CAC/B,MAAM,MAAM,IAAI,MAAM,8CAA8C;AACpE,KAAI,CAAC,IAAK,QAAO,KAAA;CACjB,MAAM,QAAQ,IAAI;CAClB,MAAM,OAAO,IAAI,GAAG,QAAQ,WAAW,GAAG;AAC1C,QAAO;EACL;EACA;EACA,UAAU,sBAAsB,MAAM,GAAG,KAAK;EAC9C,aAAa;EACb,KAAK;EACL,SAAS;EACV;;AAGH,SAAgB,uBACd,KACA,UAAmD,EAAE,EACtB;CAC/B,MAAM,YAAY,QAAQ,KAAK,MAAM,IAAI,KAAA;CACzC,MAAM,gBAAgB,uBAAuB,QAAQ,QAAQ;CAC7D,MAAM,YAAY,qBAAqB,KAAK,WAAW,cAAc;AACrE,KAAI,UAAW,QAAO;CAEtB,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,IAAI;SACZ;AACN;;AAEF,KAAI,IAAI,aAAa,YAAY,IAAI,aAAa,QAAS,QAAO,KAAA;AAClE,KAAI,IAAI,SAAS,aAAa,KAAK,aAAc,QAAO,KAAA;CAExD,MAAM,QAAQ,IAAI,SAAS,MAAM,IAAI,CAAC,OAAO,QAAQ,CAAC,IAAI,kBAAkB;AAC5E,KAAI,MAAM,SAAS,EAAG,QAAO,KAAA;CAE7B,MAAM,QAAQ,MAAM;CACpB,MAAM,OAAO,MAAM,GAAG,QAAQ,WAAW,GAAG;AAC5C,KAAI,CAAC,SAAS,CAAC,KAAM,QAAO,KAAA;CAE1B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,MAAM,SAAS,MAAM,IAAI,aAAa;AACtC,MAAK,WAAW,UAAU,WAAW,WAAW,MAAM,IAAI;AACxD,kBAAgB,MAAM,MAAM,EAAE;AAC9B,QAAM,cAAc;AACpB,YAAU,uBAAuB,cAAc,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;YAC3D,MAAM,SAAS,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,SAAS,OAAO,CACrE,WAAU,uBAAuB,MAAM,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;AAG5D,QAAO;EACL;EACA;EACA,UAAU,sBAAsB,MAAM,GAAG,KAAK;EAC9C,aAAa;EACb,KAAK,aAAa;EAClB,SAAS,iBAAiB;EAC1B;EACD;;AAGH,SAAgB,kBAAkB,KAAgC;CAChE,MAAM,IAAI,IAAI,MAAM;CACpB,MAAM,QAAQ,EAAE,aAAa;AAE7B,KAAI;AACF,MAAI,EAAE,WAAW,QAAQ,EAAE;GAEzB,MAAM,KADI,cAAc,EACZ,CAAC,aAAa;AAC1B,OAAI,GAAG,SAAS,OAAO,CAAE,QAAO;AAChC,OAAI,GAAG,SAAS,UAAU,IAAI,GAAG,SAAS,OAAO,CAAE,QAAO;AAC1D,UAAO;;SAEH;AAIR,KAAI,kBAAkB,KAAK,EAAE,IAAK,EAAE,WAAW,IAAI,IAAI,CAAC,EAAE,WAAW,KAAK,EAAG;AAC3E,MAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AACnC,MAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AAChE,SAAO;;AAGT,KAAI;EAEF,MAAM,OAAO,IADC,IAAI,EACJ,CAAC,SAAS,aAAa;AACrC,MAAI,KAAK,SAAS,OAAO,CAAE,QAAO;AAClC,MAAI,KAAK,SAAS,UAAU,IAAI,KAAK,SAAS,OAAO,CAAE,QAAO;SACxD;AAIR,KAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AACnC,KAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CAAE,QAAO;AAChE,QAAO;;AAGT,SAAgB,cAAc,UAAkB,SAA0B;CACxE,MAAM,MAAM,uBAAuB,QAAQ,IAAI;CAC/C,MAAM,OAAO,QAAQ,SAAS;CAC9B,MAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,GAAG;AACxC,KAAI,SAAS,QAAQ,CAAC,KAAK,WAAW,OAAO,IAAI,CAC/C,OAAM,IAAI,MAAM,wBAAwB,UAAU;AAEpD,KAAI,CAAC,WAAW,KAAK,CACnB,OAAM,IAAI,MAAM,6BAA6B,OAAO,MAAM;AAE5D,KAAI,WAAW,KAAK,MAAM,WAAW,CAAC,CACpC,QAAO;CAET,MAAM,UAAU,YAAY,MAAM,EAAE,eAAe,MAAM,CAAC,CAAC,QAAQ,MAAM,EAAE,aAAa,CAAC;AACzF,KAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,MAAM,KAAK,MAAM,QAAQ,GAAG,KAAK;AACvC,MAAI,WAAW,KAAK,KAAK,WAAW,CAAC,CACnC,QAAO;;AAGX,OAAM,IAAI,MACR,0FACD;;AAGH,SAAS,wBAAwB,WAA2B;CAE1D,MAAM,EAAE,gBAAgB,iBADZ,aAAa,KAAK,WAAW,WAAW,EAAE,QACV,CAAC;CAC7C,MAAM,IAAI,OAAO,YAAY,QAAQ,GAAG,CAAC,MAAM;AAC/C,KAAI,KAAK,eAAe,EAAE,CACxB,QAAO;CAET,MAAM,UAAU,SAAS,UAAU;AACnC,KAAI,eAAe,QAAQ,CACzB,QAAO;AAET,QAAO;;AAGT,eAAe,QAAQ,KAAa,QAA4C;CAC9E,MAAM,UAAU,MAAM,mBAAmB,IAAI;CAC7C,MAAM,QAAQ,SAAS,IAAI;AAC3B,KAAI,QAAQ,WAAW,KAAK,OAC1B,OAAM,IAAI,MACR,0BAA0B,QAAQ,SAAS,wBAAwB,kBAAkB,SAAS,MAAM,GACrG;AAEH,KAAI,QAAQ,WAAW,KAAK,QAAQ,OAAO,EACzC,SAAQ,KAAK,kBAAkB,SAAS,MAAM,CAAC;;AAInD,eAAe,uBACb,WACA,KACwB;CACxB,MAAM,WAAW,IAAI,SAAS,MAAM,IAAI,wBAAwB,UAAU;AAC1E,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,+EAA+E;AAEjG,KAAI,CAAC,eAAe,SAAS,CAC3B,OAAM,IAAI,MAAM,qBAAqB,SAAS,oDAAoD;CAGpG,MAAM,EAAE,SAAS,YAAY,2BAA2B,UAAU,IAAI,YAAY;AAClF,KAAI;AACF,MAAI,WAAW,QAAQ,IAAI,CAAC,IAAI,MAC9B,OAAM,IAAI,MAAM,UAAU,SAAS,2CAA2C;AAGhF,SAAO,WAAW,SAAS,EAAE,WAAW,MAAM,CAAC;AAE/C,MAAI,CAAC,WAAW,KAAK,SAAS,WAAW,CAAC,CACxC,OAAM,IAAI,MAAM,qCAAqC;AAGvD,QAAM,QAAQ,SAAS,IAAI,WAAW;EACtC,MAAM,WAAW,2BAA2B;GAC1C,SAAS;GACT;GACA,WAAW,IAAI;GACf,SAAS,IAAI;GACd,CAAC;EACF,MAAM,OAAO,yBAAyB,SAAS,KAAK;AACpD,yBACE,UACA;GACE,MAAM,IAAI;GACV,QAAQ,IAAI;GACZ,KAAK,IAAI,SAAS,QAAQ,IAAI,MAAM,KAAA;GACpC,SAAS,IAAI,SAAS,QAAQ,IAAI,UAAU,KAAA;GAC7C,EACD,MACA,IAAI,SACL;AAED,SAAO;GACL,SAAS;GACT,MAAM,SAAS;GACf,aAAa;GACb,MAAM,IAAI;GACV,QAAQ,IAAI;GACb;UACM,KAAK;AACZ,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACjD,QAAM;;;AAIV,eAAe,uBACb,KACA,aACA,SACwB;CACxB,MAAM,IAAI,oBAAoB,KAAK;EACjC,SAAS,QAAQ;EACjB,WAAW,QAAQ,SAAS;EAC5B,SAAS,QAAQ;EAClB,CAAC;CACF,MAAM,OAAO,yBAAyB,EAAE,KAAK;AAC7C,wBAAuB,EAAE,SAAS;EAAE,MAAM;EAAW,QAAQ;EAAa,EAAE,MAAM,QAAQ,SAAS;AACnG,OAAM,QAAQ,EAAE,MAAM,QAAQ,WAAW;AACzC,QAAO;EACL,SAAS,EAAE;EACX,MAAM,EAAE;EACR,aAAa;EACb,MAAM;EACN,QAAQ;EACT;;AAGH,eAAe,qBACb,aACA,aACA,SACwB;CACxB,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;AACxD,KAAI;AACF,eAAa,OAAO;GAAC;GAAQ;GAAa;GAAM;GAAQ,EAAE;GACxD,OAAO;GACP,UAAU;GACX,CAAC;AAEF,SAAO,MAAM,uBADK,cAAc,QACa,EAAE;GAAE,GAAG;GAAS,MAAM;GAAW,QAAQ;GAAa,CAAC;WAC5F;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAIrD,SAAS,kBAAkB,MAAuB;AAChD,KAAI,CAAC,KAAM,QAAO;CAClB,MAAM,aAAa,KAAK,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AAC/D,KAAI,WAAW,WAAW,IAAI,IAAI,aAAa,KAAK,WAAW,CAAE,QAAO;AACxE,QAAO,WAAW,MAAM,IAAI,CAAC,OAAO,SAAS,QAAQ,SAAS,KAAK;;AAGrE,SAAS,0BAA0B,KAAa,SAAuB;CACrE,MAAM,MAAM,IAAI,OAAO,IAAI;CAC3B,MAAM,eAAe,QAAQ,QAAQ;AACrC,MAAK,MAAM,SAAS,IAAI,YAAY,EAAE;EACpC,MAAM,aAAa,MAAM,UAAU,QAAQ,OAAO,IAAI;AACtD,MAAI,CAAC,cAAc,oBAAoB,WAAW,CAAE;AACpD,MAAI,CAAC,kBAAkB,WAAW,CAChC,OAAM,IAAI,MAAM,0BAA0B,MAAM,YAAY;EAG9D,MAAM,SAAS,KAAK,SAAS,WAAW;EACxC,MAAM,iBAAiB,QAAQ,OAAO;AACtC,MAAI,mBAAmB,gBAAgB,CAAC,eAAe,WAAW,eAAe,IAAI,CACnF,OAAM,IAAI,MAAM,0BAA0B,MAAM,YAAY;AAG9D,MAAI,MAAM,aAAa;AACrB,aAAU,QAAQ,EAAE,WAAW,MAAM,CAAC;AACtC;;AAEF,YAAU,QAAQ,OAAO,EAAE,EAAE,WAAW,MAAM,CAAC;AAC/C,gBAAc,QAAQ,MAAM,SAAS,CAAC;;;AAI1C,SAAS,4BAA4B,SAAyB;CAC5D,MAAM,UAAU,YAAY,SAAS,EAAE,eAAe,MAAM,CAAC,CAAC,QAAQ,UAAU,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC;CAC5G,MAAM,OAAO,QAAQ,QAAQ,UAAU,MAAM,aAAa,CAAC;CAC3D,MAAM,QAAQ,QAAQ,QAAQ,UAAU,MAAM,QAAQ,CAAC;AACvD,KAAI,KAAK,WAAW,KAAK,MAAM,WAAW,EACxC,QAAO,KAAK,SAAS,KAAK,GAAG,KAAK;AAEpC,QAAO;;AAGT,eAAe,2BAA2B,QAAwD;CAChG,MAAM,SAAS,gCAAgC,OAAO,MAAM,GAAG,OAAO;AACtE,KAAI;EACF,MAAM,MAAM,MAAM,MAAM,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;AAC7D,MAAI,CAAC,IAAI,GAAI,QAAO,KAAA;EACpB,MAAM,OAAQ,MAAM,IAAI,MAAM;AAE9B,UADe,OAAO,KAAK,mBAAmB,WAAW,KAAK,eAAe,MAAM,GAAG,OACrE,KAAA;SACX;AACN;;;AAIJ,eAAe,gBACb,QACA,WACA,KACkB;CAClB,MAAM,MAAM,gCAAgC,OAAO,MAAM,GAAG,OAAO,KAAK,WAAW,UAAU,GAAG,UAAU,IAAI;AAC9G,KAAI;AAEF,UAAO,MADW,MAAM,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC,EAC/C;SACL;AACN,SAAO;;;AAIX,eAAe,+BACb,QACA,SAC6C;CAC7C,MAAM,YAAY,QAAQ,KAAK,MAAM,IAAI,KAAA;CACzC,MAAM,gBAAgB,QAAQ,WAAW,KAAA;AACzC,KAAI,aAAa,CAAC,OAAO,eAAe,OACtC,QAAO;EACL,KAAK,aAAa,OAAO;EACzB,SAAS,iBAAiB,OAAO;EAClC;AAGH,MAAK,IAAI,IAAI,OAAO,cAAc,QAAQ,KAAK,GAAG,KAAK,GAAG;EACxD,MAAM,YAAY,OAAO,cAAc,MAAM,GAAG,EAAE,CAAC,KAAK,IAAI;AAC5D,MACG,MAAM,gBAAgB,QAAQ,SAAS,UAAU,IACjD,MAAM,gBAAgB,QAAQ,QAAQ,UAAU,CAEjD,QAAO;GACL,KAAK;GACL,SAAS,iBAAiB,uBAAuB,OAAO,cAAc,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC;GAC1F;;AAIL,QAAO;EACL,KAAK,OAAO;EACZ,SAAS,iBAAiB,OAAO;EAClC;;AAGH,eAAe,2BACb,QACA,SACwB;CACxB,MAAM,MAAM,QAAQ,KAAK,MAAM,IAAK,MAAM,2BAA2B,OAAO,IAAK;CAEjF,MAAM,MAAM,MAAM,MAAM,+BADsB,OAAO,MAAM,GAAG,OAAO,KAAK,OAAO,UAAU,IAAI,IAC/D,EAAE,SAAS,eAAe,EAAE,CAAC;AAC7D,KAAI,CAAC,IAAI,GACP,OAAM,IAAI,2BAA2B,QAAQ,IAAI,OAAO,iCAAiC,IAAI,OAAO;CAGtG,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,mBAAmB,CAAC;AAC/D,KAAI;AAEF,4BADY,OAAO,KAAK,MAAM,IAAI,aAAa,CAClB,EAAE,QAAQ;EACvC,MAAM,WAAW,4BAA4B,QAAQ;EACrD,MAAM,mBAAmB;GAAE,GAAG;GAAS;GAAK,SAAS,QAAQ,WAAW,OAAO;GAAS;AAExF,SAAO,MAAM,uBADK,cAAc,UAAU,iBAAiB,QACd,EAAE;GAC7C,GAAG;GACH,MAAM;GACN,QAAQ,OAAO;GAChB,CAAC;WACM;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAIrD,eAAe,0BACb,QACA,SACwB;CACxB,MAAM,UAAU,uBAAuB,QAAQ,WAAW,OAAO,QAAQ;AACzE,KAAI,CAAC,QACH,QAAO,iBAAiB,OAAO,UAAU,SAAS,OAAO,YAAY;CAGvE,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,sBAAsB,CAAC;CAClE,MAAM,WAAW,KAAK,SAAS,QAAQ;CACvC,IAAI,YAAY,QAAQ,KAAK,MAAM,IAAI,KAAA;AACvC,KAAI;EACF,MAAM,OAAO;GAAC;GAAS;GAAW;GAAK;GAAsB;GAAW;AACxE,MAAI,UACF,MAAK,KAAK,YAAY,UAAU;AAElC,OAAK,KAAK,OAAO,UAAU,SAAS;AACpC,MAAI;AACF,gBAAa,OAAO,MAAM;IAAE,OAAO;IAAQ,UAAU;IAAS,CAAC;UACzD;AACN,OAAI,CAAC,UAAW,OAAM,IAAI,MAAM,wBAAwB,OAAO,WAAW;AAC1E,eAAY,KAAA;AACZ,gBACE,OACA;IAAC;IAAS;IAAW;IAAK;IAAsB;IAAY,OAAO;IAAU;IAAS,EACtF;IAAE,OAAO;IAAQ,UAAU;IAAS,CACrC;;AAGH,eAAa,OAAO;GAAC;GAAM;GAAU;GAAmB;GAAO;GAAa;GAAQ,EAAE;GACpF,OAAO;GACP,UAAU;GACX,CAAC;EACF,MAAM,mBAAmB;GAAE,GAAG;GAAS;GAAS,KAAK;GAAW;AAEhE,SAAO,MAAM,uBADK,cAAc,UAAU,QACG,EAAE;GAC7C,GAAG;GACH,MAAM;GACN,QAAQ,OAAO;GAChB,CAAC;UACK,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,IAAI,SAAS,SAAS,IAAI,IAAI,SAAS,mBAAmB,CAC5D,OAAM,IAAI,MACR,yBAAyB,IAAI,6DAC9B;AAEH,QAAM;WACE;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAIrD,eAAe,oBACb,QACA,SACwB;CACxB,MAAM,WAAW,MAAM,+BAA+B,QAAQ,QAAQ;CACtE,MAAM,mBAAmB;EACvB,GAAG;EACH,KAAK,SAAS;EACd,SAAS,SAAS;EACnB;AACD,KAAI;AACF,SAAO,MAAM,2BAA2B,QAAQ,iBAAiB;UAC1D,YAAY;AACnB,MAAI;AACF,UAAO,MAAM,0BAA0B,QAAQ,iBAAiB;WACzD,QAAQ;GACf,MAAM,aAAa,sBAAsB,QAAQ,WAAW,UAAU,OAAO,WAAW;GACxF,MAAM,SAAS,kBAAkB,QAAQ,OAAO,UAAU,OAAO,OAAO;AACxE,SAAM,IAAI,MAAM,kCAAkC,WAAW,0BAA0B,OAAO,GAAG;;;;AAKvG,eAAe,uBAAuB,SAAiB,SAAiD;CACtG,MAAM,WAAW,QAAQ,QAAQ;AACjC,KAAI,CAAC,WAAW,SAAS,CACvB,OAAM,IAAI,MAAM,cAAc,WAAW;AAG3C,KAAI,CADO,SAAS,SACb,CAAC,QAAQ,CACd,OAAM,IAAI,MAAM,iFAAiF;CAEnG,MAAM,QAAQ,SAAS,aAAa;AACpC,KAAI,MAAM,SAAS,OAAO,CAExB,QAAO,uBADK,aAAa,SACQ,EAAE,UAAU,QAAQ;AAEvD,KAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,CACrD,QAAO,qBAAqB,UAAU,UAAU,QAAQ;AAE1D,OAAM,IAAI,MAAM,0DAA0D;;AAG5E,eAAe,iBACb,KACA,SACA,cAAc,KACU;CACxB,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;CACxD,MAAM,WAAW,KAAK,SAAS,QAAQ;CACvC,IAAI,YAAY,QAAQ,KAAK,MAAM,IAAI,KAAA;AACvC,KAAI;EACF,MAAM,OAAO;GAAC;GAAS;GAAW;GAAI;AACtC,MAAI,UACF,MAAK,KAAK,YAAY,UAAU;AAElC,OAAK,KAAK,KAAK,SAAS;AACxB,MAAI;AACF,gBAAa,OAAO,MAAM;IAAE,OAAO;IAAQ,UAAU;IAAS,CAAC;UACzD;AACN,OAAI,WAAW;AACb,gBAAY,KAAA;AACZ,iBAAa,OAAO;KAAC;KAAS;KAAW;KAAK;KAAK;KAAS,EAAE;KAC5D,OAAO;KACP,UAAU;KACX,CAAC;SAEF,OAAM,IAAI,MAAM,wBAAwB,MAAM;;AAIlD,SAAO,MAAM,uBADK,cAAc,UAAU,QAAQ,QACL,EAAE;GAC7C,GAAG;GACH,KAAK;GACL,MAAM;GACN,QAAQ;GACT,CAAC;UACK,GAAG;EACV,MAAM,MAAM,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AACtD,MAAI,IAAI,SAAS,SAAS,IAAI,IAAI,SAAS,mBAAmB,CAC5D,OAAM,IAAI,MACR,yBAAyB,IAAI,6DAC9B;AAEH,QAAM;WACE;AACR,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;;;;AAOrD,eAAsB,oBACpB,QACA,UAA0B,EAAE,EACJ;CACxB,MAAM,UAAU,OAAO,MAAM;AAC7B,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,6BAA6B;AAG/C,KAAI,QAAQ,WAAW,QAAQ,CAC7B,QAAO,uBAAuB,cAAc,QAAQ,EAAE,QAAQ;AAGhE,KAAI,CAAC,6BAA6B,KAAK,QAAQ,IAAI,WAAW,QAAQ,CACpE,QAAO,uBAAuB,QAAQ,QAAQ,EAAE,QAAQ;CAG1D,MAAM,eAAe,uBAAuB,SAAS,QAAQ;AAC7D,KAAI,aACF,QAAO,oBAAoB,cAAc,QAAQ;AAInD,KADa,kBAAkB,QACvB,KAAK,WAAW;EACtB,MAAM,MAAM,MAAM,MAAM,QAAQ;AAChC,MAAI,CAAC,IAAI,GACP,OAAM,IAAI,MAAM,QAAQ,IAAI,OAAO,yBAAyB;EAE9D,MAAM,MAAM,OAAO,KAAK,MAAM,IAAI,aAAa,CAAC;EAChD,MAAM,QAAQ,QAAQ,aAAa;AACnC,MAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,OAAO,EAAE;GACvD,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,kBAAkB,CAAC;GAC9D,MAAM,IAAI,KAAK,SAAS,cAAc;AACtC,OAAI;AACF,cAAU,SAAS,EAAE,WAAW,MAAM,CAAC;AACvC,kBAAc,GAAG,IAAI;AACrB,WAAO,MAAM,qBAAqB,GAAG,SAAS,QAAQ;aAC9C;AACR,WAAO,SAAS;KAAE,WAAW;KAAM,OAAO;KAAM,CAAC;;;AAGrD,SAAO,uBAAuB,KAAK,SAAS,QAAQ;;AAGtD,QAAO,iBAAiB,SAAS,QAAQ;;;AAI3C,eAAsB,oBACpB,SACA,UAA8C,EAAE,EACxB;CACxB,MAAM,IAAI,mBAAmB,QAAQ;AACrC,KAAI,CAAC,EACH,OAAM,IAAI,MACR,0BAA0B,QAAQ,wDACnC;AAEH,QAAO,oBAAoB,EAAE,QAAQ;EACnC;EACA,KAAK,EAAE;EACP,SAAS,EAAE;EACX,OAAO;EACP,YAAY,QAAQ;EACrB,CAAC"}