runcastle 0.1.0 → 1.0.0

package/web/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>runcastle</title>
+    <script type="module" crossorigin src="/assets/index-YBuT7tTz.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-CKZ5Z7vc.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/dist/add-PRGLHAVL.js

@@ -1,298 +0,0 @@
-import {
-  compatibilityNote,
-  detectSandcastle,
-  renderPreview
-} from "./chunk-ZQ3BK4ZD.js";
-import {
-  downloadFromRegistry,
-  writeLockEntry
-} from "./chunk-UCYVC3H6.js";
-import {
-  hasConflicts,
-  planInstall,
-  postInstallNotes,
-  renderDiff,
-  sha256Hex,
-  toPreviewPlan,
-  writePlan
-} from "./chunk-Y5P5BQWF.js";
-import {
-  RealGitHubClient
-} from "./chunk-OJ356IMJ.js";
-import {
-  RegistryClient,
-  getFetch
-} from "./chunk-5VPKMXSV.js";
-import {
-  configDir,
-  resolveRegistry
-} from "./chunk-LP5MV76P.js";
-import {
-  PAYLOAD_DIR,
-  parseManifest
-} from "./chunk-AHRTPV2C.js";
-import {
-  CliError
-} from "./chunk-6CWCR5SO.js";
-import {
-  emitJson,
-  isJsonMode,
-  log,
-  pc
-} from "./chunk-PRNBOQHW.js";
-
-// src/commands/add.ts
-import "path";
-
-// src/lib/install-id.ts
-import fsp from "fs/promises";
-import path from "path";
-import { randomUUID } from "crypto";
-function idPath() {
-  return path.join(configDir(), "install-id");
-}
-async function getInstallId() {
-  const file = idPath();
-  try {
-    const existing = (await fsp.readFile(file, "utf8")).trim();
-    if (existing) return existing;
-  } catch {
-  }
-  const id = randomUUID();
-  try {
-    await fsp.mkdir(configDir(), { recursive: true });
-    await fsp.writeFile(file, id, "utf8");
-  } catch {
-  }
-  return id;
-}
-
-// src/commands/add.ts
-function parseAddSpec(spec) {
-  if (spec.startsWith("github:")) {
-    const rest = spec.slice("github:".length);
-    const atIdx2 = rest.indexOf("@");
-    const pathPart = atIdx2 === -1 ? rest : rest.slice(0, atIdx2);
-    const ref = atIdx2 === -1 ? "" : rest.slice(atIdx2 + 1);
-    const segs2 = pathPart.split("/").filter(Boolean);
-    if (segs2.length < 2) {
-      throw new CliError(`invalid github: spec "${spec}" \u2014 expected github:owner/repo[/dir][@sha]`, {
-        code: "E_BAD_SPEC"
-      });
-    }
-    const owner = segs2[0];
-    const repo = segs2[1];
-    const dirSegs = segs2.slice(2);
-    return {
-      githubMode: true,
-      owner,
-      repo,
-      ...dirSegs.length ? { directory: dirSegs.join("/") } : {},
-      ...ref ? { ref } : {}
-    };
-  }
-  const atIdx = spec.indexOf("@");
-  const namepart = atIdx === -1 ? spec : spec.slice(0, atIdx);
-  const version = atIdx === -1 ? "" : spec.slice(atIdx + 1);
-  const segs = namepart.split("/").filter(Boolean);
-  if (segs.length !== 2) {
-    throw new CliError(`invalid spec "${spec}" \u2014 expected author/slug[@version] or github:owner/repo[/dir][@sha]`, {
-      code: "E_BAD_SPEC"
-    });
-  }
-  return {
-    githubMode: false,
-    author: segs[0],
-    slug: segs[1],
-    ...version ? { version } : {}
-  };
-}
-async function resolveFromRegistry(parsed, registry, github, fetchImpl) {
-  const record = await registry.getWorkflow(parsed.author, parsed.slug, parsed.version);
-  const downloaded = await downloadFromRegistry(record, registry, github, fetchImpl);
-  return {
-    manifest: record.manifest,
-    author: record.author,
-    slug: record.slug,
-    version: record.version,
-    commitSha: record.commitSha,
-    files: downloaded.map((d) => ({ path: d.path, bytes: d.bytes, sha256: d.sha256 })),
-    githubMode: false,
-    source: `${record.author}/${record.slug}`,
-    registry
-  };
-}
-async function resolveFromGitHub(parsed, github) {
-  const { owner, repo } = parsed;
-  const dirPrefix = parsed.directory ? `${parsed.directory.replace(/\/+$/, "")}/` : "";
-  const sha = await github.resolveRef(owner, repo, parsed.ref ?? "HEAD");
-  const manifestBytes = await github.fetchRawFile(owner, repo, sha, `${dirPrefix}workflow.json`);
-  let manifest;
-  try {
-    const parsedManifest = parseManifest(JSON.parse(new TextDecoder().decode(manifestBytes)));
-    if (!parsedManifest.ok) {
-      throw new CliError(`workflow.json at ${owner}/${repo}@${sha.slice(0, 7)} is invalid`, {
-        code: "E_SCHEMA_INVALID",
-        details: parsedManifest.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`)
-      });
-    }
-    manifest = parsedManifest.manifest;
-  } catch (e) {
-    if (e instanceof CliError) throw e;
-    throw new CliError(`could not parse workflow.json from ${owner}/${repo}`, {
-      code: "E_SCHEMA_INVALID",
-      details: [e.message]
-    });
-  }
-  const files = [];
-  for (const rel of manifest.files) {
-    const bytes = await github.fetchRawFile(owner, repo, sha, `${dirPrefix}${rel}`);
-    files.push({ path: rel, bytes, sha256: sha256Hex(bytes) });
-  }
-  return {
-    manifest,
-    author: `github:${owner}/${repo}`,
-    slug: manifest.slug,
-    version: manifest.version,
-    commitSha: sha,
-    files,
-    githubMode: true,
-    source: `github:${owner}/${repo}${parsed.directory ? `/${parsed.directory}` : ""}`
-  };
-}
-async function decideInstallDir(projectRoot, slug, files, opts) {
-  if (opts.dir) {
-    return { installDir: `${PAYLOAD_DIR}/${opts.dir.replace(/^[./]+/, "")}`, namespaced: true };
-  }
-  const flatPlan = planInstall(projectRoot, files, PAYLOAD_DIR);
-  if (!hasConflicts(flatPlan)) return { installDir: PAYLOAD_DIR, namespaced: false };
-  const namespacedDir = `${PAYLOAD_DIR}/${slug}`;
-  const interactive = !opts.yes && !isJsonMode() && process.stdin.isTTY;
-  if (!interactive) return { installDir: namespacedDir, namespaced: true };
-  const clack = await import("@clack/prompts");
-  const choice = await clack.select({
-    message: `Existing .sandcastle/ files would be overwritten. Install where?`,
-    options: [
-      { value: "namespaced", label: `Namespaced \u2014 ${namespacedDir}/ (recommended)` },
-      { value: "overwrite", label: `Overwrite files in ${PAYLOAD_DIR}/` }
-    ],
-    initialValue: "namespaced"
-  });
-  if (clack.isCancel(choice)) throw new CliError("", { exitCode: 1, code: "E_CANCELLED" });
-  return choice === "overwrite" ? { installDir: PAYLOAD_DIR, namespaced: false } : { installDir: namespacedDir, namespaced: true };
-}
-async function addCommand(spec, opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  const fetchImpl = getFetch(opts.fetchImpl);
-  const github = opts.github ?? new RealGitHubClient({ fetchImpl });
-  const parsed = parseAddSpec(spec);
-  let resolved;
-  if (parsed.githubMode) {
-    resolved = await resolveFromGitHub(parsed, github);
-  } else {
-    const registry = new RegistryClient({ baseUrl: resolveRegistry(opts.registry), fetchImpl });
-    resolved = await resolveFromRegistry(parsed, registry, github, fetchImpl);
-  }
-  const { installDir } = await decideInstallDir(cwd, resolved.slug, resolved.files, opts);
-  const plan = planInstall(cwd, resolved.files, installDir);
-  const detected = await detectSandcastle(cwd);
-  const note = compatibilityNote(resolved.manifest.sandcastle.versionRange, detected);
-  const previewText = renderPreview({
-    manifest: resolved.manifest,
-    author: resolved.author,
-    version: resolved.version,
-    compatibilityNote: note,
-    filePlan: toPreviewPlan(plan),
-    installDir,
-    githubMode: resolved.githubMode,
-    colorize: pc.isColorSupported && !isJsonMode()
-  });
-  if (isJsonMode()) {
-    if (opts.dryRun || !opts.yes) {
-      emitJson({
-        ok: true,
-        action: "preview",
-        author: resolved.author,
-        slug: resolved.slug,
-        version: resolved.version,
-        commitSha: resolved.commitSha,
-        installDir,
-        githubMode: resolved.githubMode,
-        compatibilityNote: note ?? null,
-        disclosures: resolved.manifest.disclosures,
-        env: resolved.manifest.env,
-        files: plan.map((p) => ({ target: p.target, action: p.action, sha256: p.sha256 }))
-      });
-      return;
-    }
-  } else {
-    log(previewText);
-  }
-  const interactive = !opts.yes && !isJsonMode() && process.stdin.isTTY;
-  if (opts.dryRun) {
-    if (!isJsonMode()) log(pc.dim("\n(dry run \u2014 nothing written)"));
-    return;
-  }
-  const conflicts = plan.filter((p) => p.action === "overwrite");
-  if (interactive && conflicts.length > 0) {
-    const clack = await import("@clack/prompts");
-    const showDiff = await clack.confirm({
-      message: `${conflicts.length} file(s) will be overwritten. Show diffs?`,
-      initialValue: false
-    });
-    if (!clack.isCancel(showDiff) && showDiff) {
-      for (const p of conflicts) {
-        log("");
-        log(renderDiff(cwd, p));
-      }
-    }
-  }
-  if (interactive) {
-    const clack = await import("@clack/prompts");
-    const ok = await clack.confirm({ message: `Write ${plan.filter((p) => p.action !== "identical").length} file(s)?`, initialValue: true });
-    if (clack.isCancel(ok) || !ok) {
-      throw new CliError("aborted \u2014 nothing written", { exitCode: 1, code: "E_ABORTED" });
-    }
-  }
-  await writePlan(cwd, plan);
-  const filesRecord = {};
-  for (const p of plan) filesRecord[p.target] = p.sha256;
-  await writeLockEntry(cwd, {
-    source: resolved.source,
-    slug: resolved.slug,
-    ...resolved.githubMode ? {} : { author: resolved.author },
-    version: resolved.version,
-    sha: resolved.commitSha,
-    ...resolved.registry ? { registry: resolved.registry.baseUrl } : {},
-    dir: installDir,
-    files: filesRecord,
-    installedAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
-  if (!isJsonMode()) {
-    const written = plan.filter((p) => p.action !== "identical").length;
-    log("");
-    log(pc.green(`\u2713 installed ${resolved.slug}@${resolved.version} (${written} file(s) into ${installDir}/)`));
-    log("");
-    log(pc.bold("Next steps:"));
-    for (const line of postInstallNotes(resolved.manifest, installDir)) log(`  ${line}`);
-  } else {
-    emitJson({
-      ok: true,
-      action: "install",
-      slug: resolved.slug,
-      version: resolved.version,
-      installDir,
-      written: plan.filter((p) => p.action !== "identical").map((p) => p.target)
-    });
-  }
-  if (resolved.registry) {
-    const anonId = await getInstallId();
-    void resolved.registry.ping(resolved.author, resolved.slug, anonId).catch(() => {
-    });
-  }
-}
-export {
-  addCommand,
-  parseAddSpec
-};
-//# sourceMappingURL=add-PRGLHAVL.js.map

package/dist/add-PRGLHAVL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/add.ts","../src/lib/install-id.ts"],"sourcesContent":["// `runcastle add <author/slug>[@version]` and `add github:owner/repo[/dir][@sha]`\n// (spec §5.4). The critical path. Order is exact: resolve → download → verify\n// checksums → preview → confirm → write → post-install → lockfile → ping.\n\nimport path from \"node:path\";\nimport {\n  parseManifest,\n  PAYLOAD_DIR,\n  type Manifest,\n  type WorkflowRecord,\n} from \"@castellan/schema\";\nimport { CliError } from \"../lib/errors.js\";\nimport { emitJson, isJsonMode, log, pc } from \"../lib/output.js\";\nimport { resolveRegistry } from \"../lib/config.js\";\nimport { RegistryClient } from \"../lib/registry.js\";\nimport { RealGitHubClient, type GitHubClient } from \"../lib/github.js\";\nimport { downloadFromRegistry } from \"../lib/download.js\";\nimport { sha256Hex } from \"../lib/checksum.js\";\nimport { getFetch, type FetchLike } from \"../lib/http.js\";\nimport { detectSandcastle, compatibilityNote } from \"../lib/sandcastle-version.js\";\nimport { renderPreview } from \"../lib/preview.js\";\nimport {\n  planInstall,\n  hasConflicts,\n  toPreviewPlan,\n  renderDiff,\n  writePlan,\n  postInstallNotes,\n  type PlannedFile,\n} from \"../lib/installer.js\";\nimport { writeLockEntry } from \"../lib/lockfile.js\";\nimport { getInstallId } from \"../lib/install-id.js\";\n\nexport interface AddOptions {\n  dir?: string;\n  dryRun?: boolean;\n  yes?: boolean;\n  json?: boolean;\n  registry?: string;\n  /** Test seams. */\n  fetchImpl?: FetchLike;\n  github?: GitHubClient;\n  cwd?: string;\n}\n\ninterface ResolvedInstall {\n  manifest: Manifest;\n  author: string;\n  slug: string;\n  version: string;\n  commitSha: string;\n  files: { path: string; bytes: Uint8Array; sha256: string }[];\n  githubMode: boolean;\n  source: string;\n  registry?: RegistryClient;\n}\n\n// --- Spec parsing ------------------------------------------------------------\n\ninterface ParsedRef {\n  githubMode: boolean;\n  author?: string;\n  slug?: string;\n  version?: string;\n  owner?: string;\n  repo?: string;\n  directory?: string;\n  ref?: string;\n}\n\nexport function parseAddSpec(spec: string): ParsedRef {\n  if (spec.startsWith(\"github:\")) {\n    const rest = spec.slice(\"github:\".length);\n    const atIdx = rest.indexOf(\"@\");\n    const pathPart = atIdx === -1 ? rest : rest.slice(0, atIdx);\n    const ref = atIdx === -1 ? \"\" : rest.slice(atIdx + 1);\n    const segs = pathPart.split(\"/\").filter(Boolean);\n    if (segs.length < 2) {\n      throw new CliError(`invalid github: spec \"${spec}\" — expected github:owner/repo[/dir][@sha]`, {\n        code: \"E_BAD_SPEC\",\n      });\n    }\n    const owner = segs[0]!;\n    const repo = segs[1]!;\n    const dirSegs = segs.slice(2);\n    return {\n      githubMode: true,\n      owner,\n      repo,\n      ...(dirSegs.length ? { directory: dirSegs.join(\"/\") } : {}),\n      ...(ref ? { ref } : {}),\n    };\n  }\n  const atIdx = spec.indexOf(\"@\");\n  const namepart = atIdx === -1 ? spec : spec.slice(0, atIdx);\n  const version = atIdx === -1 ? \"\" : spec.slice(atIdx + 1);\n  const segs = namepart.split(\"/\").filter(Boolean);\n  if (segs.length !== 2) {\n    throw new CliError(`invalid spec \"${spec}\" — expected author/slug[@version] or github:owner/repo[/dir][@sha]`, {\n      code: \"E_BAD_SPEC\",\n    });\n  }\n  return {\n    githubMode: false,\n    author: segs[0]!,\n    slug: segs[1]!,\n    ...(version ? { version } : {}),\n  };\n}\n\n// --- Resolution --------------------------------------------------------------\n\nasync function resolveFromRegistry(\n  parsed: ParsedRef,\n  registry: RegistryClient,\n  github: GitHubClient,\n  fetchImpl: FetchLike,\n): Promise<ResolvedInstall> {\n  const record: WorkflowRecord = await registry.getWorkflow(parsed.author!, parsed.slug!, parsed.version);\n  const downloaded = await downloadFromRegistry(record, registry, github, fetchImpl);\n  return {\n    manifest: record.manifest,\n    author: record.author,\n    slug: record.slug,\n    version: record.version,\n    commitSha: record.commitSha,\n    files: downloaded.map((d) => ({ path: d.path, bytes: d.bytes, sha256: d.sha256 })),\n    githubMode: false,\n    source: `${record.author}/${record.slug}`,\n    registry,\n  };\n}\n\nasync function resolveFromGitHub(\n  parsed: ParsedRef,\n  github: GitHubClient,\n): Promise<ResolvedInstall> {\n  const { owner, repo } = parsed;\n  const dirPrefix = parsed.directory ? `${parsed.directory.replace(/\\/+$/, \"\")}/` : \"\";\n  const sha = await github.resolveRef(owner!, repo!, parsed.ref ?? \"HEAD\");\n\n  // Fetch and parse the manifest at the pinned SHA.\n  const manifestBytes = await github.fetchRawFile(owner!, repo!, sha, `${dirPrefix}workflow.json`);\n  let manifest: Manifest;\n  try {\n    const parsedManifest = parseManifest(JSON.parse(new TextDecoder().decode(manifestBytes)));\n    if (!parsedManifest.ok) {\n      throw new CliError(`workflow.json at ${owner}/${repo}@${sha.slice(0, 7)} is invalid`, {\n        code: \"E_SCHEMA_INVALID\",\n        details: parsedManifest.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`),\n      });\n    }\n    manifest = parsedManifest.manifest;\n  } catch (e) {\n    if (e instanceof CliError) throw e;\n    throw new CliError(`could not parse workflow.json from ${owner}/${repo}`, {\n      code: \"E_SCHEMA_INVALID\",\n      details: [(e as Error).message],\n    });\n  }\n\n  // Fetch every listed file and compute checksums CLIENT-SIDE (M1: no tamper\n  // evidence — surfaced in the preview).\n  const files: ResolvedInstall[\"files\"] = [];\n  for (const rel of manifest.files) {\n    const bytes = await github.fetchRawFile(owner!, repo!, sha, `${dirPrefix}${rel}`);\n    files.push({ path: rel, bytes, sha256: sha256Hex(bytes) });\n  }\n\n  return {\n    manifest,\n    author: `github:${owner}/${repo}`,\n    slug: manifest.slug,\n    version: manifest.version,\n    commitSha: sha,\n    files,\n    githubMode: true,\n    source: `github:${owner}/${repo}${parsed.directory ? `/${parsed.directory}` : \"\"}`,\n  };\n}\n\n// --- Install-dir decision ----------------------------------------------------\n\nasync function decideInstallDir(\n  projectRoot: string,\n  slug: string,\n  files: ResolvedInstall[\"files\"],\n  opts: AddOptions,\n): Promise<{ installDir: string; namespaced: boolean }> {\n  if (opts.dir) {\n    return { installDir: `${PAYLOAD_DIR}/${opts.dir.replace(/^[./]+/, \"\")}`, namespaced: true };\n  }\n  // Default target: .sandcastle. Detect conflicts against existing files.\n  const flatPlan = planInstall(projectRoot, files, PAYLOAD_DIR);\n  if (!hasConflicts(flatPlan)) return { installDir: PAYLOAD_DIR, namespaced: false };\n\n  // Conflict: default to a namespaced install (spec §11.4). Offer the choice\n  // interactively; non-interactive falls back to the safe (namespaced) default.\n  const namespacedDir = `${PAYLOAD_DIR}/${slug}`;\n  const interactive = !opts.yes && !isJsonMode() && process.stdin.isTTY;\n  if (!interactive) return { installDir: namespacedDir, namespaced: true };\n\n  const clack = await import(\"@clack/prompts\");\n  const choice = await clack.select({\n    message: `Existing .sandcastle/ files would be overwritten. Install where?`,\n    options: [\n      { value: \"namespaced\", label: `Namespaced — ${namespacedDir}/ (recommended)` },\n      { value: \"overwrite\", label: `Overwrite files in ${PAYLOAD_DIR}/` },\n    ],\n    initialValue: \"namespaced\",\n  });\n  if (clack.isCancel(choice)) throw new CliError(\"\", { exitCode: 1, code: \"E_CANCELLED\" });\n  return choice === \"overwrite\"\n    ? { installDir: PAYLOAD_DIR, namespaced: false }\n    : { installDir: namespacedDir, namespaced: true };\n}\n\n// --- Command -----------------------------------------------------------------\n\nexport async function addCommand(spec: string, opts: AddOptions): Promise<void> {\n  const cwd = opts.cwd ?? process.cwd();\n  const fetchImpl = getFetch(opts.fetchImpl);\n  const github = opts.github ?? new RealGitHubClient({ fetchImpl });\n  const parsed = parseAddSpec(spec);\n\n  // 1–2. Resolve + download + verify.\n  let resolved: ResolvedInstall;\n  if (parsed.githubMode) {\n    resolved = await resolveFromGitHub(parsed, github);\n  } else {\n    const registry = new RegistryClient({ baseUrl: resolveRegistry(opts.registry), fetchImpl });\n    resolved = await resolveFromRegistry(parsed, registry, github, fetchImpl);\n  }\n\n  // Install-dir decision (conflict → namespaced default).\n  const { installDir } = await decideInstallDir(cwd, resolved.slug, resolved.files, opts);\n  const plan = planInstall(cwd, resolved.files, installDir);\n\n  // 3. Preview.\n  const detected = await detectSandcastle(cwd);\n  const note = compatibilityNote(resolved.manifest.sandcastle.versionRange, detected);\n  const previewText = renderPreview({\n    manifest: resolved.manifest,\n    author: resolved.author,\n    version: resolved.version,\n    compatibilityNote: note,\n    filePlan: toPreviewPlan(plan),\n    installDir,\n    githubMode: resolved.githubMode,\n    colorize: pc.isColorSupported && !isJsonMode(),\n  });\n\n  if (isJsonMode()) {\n    // In --json mode we only write when explicitly told to (--yes) and not\n    // dry-run. When we're not writing, emit the preview plan and stop; when we\n    // are, stay silent here — a single install result is emitted after writing.\n    if (opts.dryRun || !opts.yes) {\n      emitJson({\n        ok: true,\n        action: \"preview\",\n        author: resolved.author,\n        slug: resolved.slug,\n        version: resolved.version,\n        commitSha: resolved.commitSha,\n        installDir,\n        githubMode: resolved.githubMode,\n        compatibilityNote: note ?? null,\n        disclosures: resolved.manifest.disclosures,\n        env: resolved.manifest.env,\n        files: plan.map((p) => ({ target: p.target, action: p.action, sha256: p.sha256 })),\n      });\n      return;\n    }\n  } else {\n    log(previewText);\n  }\n\n  // 3e. Diffs on conflict (interactive, non-json).\n  const interactive = !opts.yes && !isJsonMode() && process.stdin.isTTY;\n  if (opts.dryRun) {\n    if (!isJsonMode()) log(pc.dim(\"\\n(dry run — nothing written)\"));\n    return;\n  }\n\n  const conflicts = plan.filter((p) => p.action === \"overwrite\");\n  if (interactive && conflicts.length > 0) {\n    const clack = await import(\"@clack/prompts\");\n    const showDiff = await clack.confirm({\n      message: `${conflicts.length} file(s) will be overwritten. Show diffs?`,\n      initialValue: false,\n    });\n    if (!clack.isCancel(showDiff) && showDiff) {\n      for (const p of conflicts) {\n        log(\"\");\n        log(renderDiff(cwd, p));\n      }\n    }\n  }\n\n  // 3/4. Confirm + write.\n  if (interactive) {\n    const clack = await import(\"@clack/prompts\");\n    const ok = await clack.confirm({ message: `Write ${plan.filter((p) => p.action !== \"identical\").length} file(s)?`, initialValue: true });\n    if (clack.isCancel(ok) || !ok) {\n      throw new CliError(\"aborted — nothing written\", { exitCode: 1, code: \"E_ABORTED\" });\n    }\n  }\n\n  await writePlan(cwd, plan);\n\n  // 6. Lockfile.\n  const filesRecord: Record<string, string> = {};\n  for (const p of plan) filesRecord[p.target] = p.sha256;\n  await writeLockEntry(cwd, {\n    source: resolved.source,\n    slug: resolved.slug,\n    ...(resolved.githubMode ? {} : { author: resolved.author }),\n    version: resolved.version,\n    sha: resolved.commitSha,\n    ...(resolved.registry ? { registry: resolved.registry.baseUrl } : {}),\n    dir: installDir,\n    files: filesRecord,\n    installedAt: new Date().toISOString(),\n  });\n\n  // 5. Post-install output.\n  if (!isJsonMode()) {\n    const written = plan.filter((p) => p.action !== \"identical\").length;\n    log(\"\");\n    log(pc.green(`✓ installed ${resolved.slug}@${resolved.version} (${written} file(s) into ${installDir}/)`));\n    log(\"\");\n    log(pc.bold(\"Next steps:\"));\n    for (const line of postInstallNotes(resolved.manifest, installDir)) log(`  ${line}`);\n  } else {\n    emitJson({\n      ok: true,\n      action: \"install\",\n      slug: resolved.slug,\n      version: resolved.version,\n      installDir,\n      written: plan.filter((p) => p.action !== \"identical\").map((p) => p.target),\n    });\n  }\n\n  // 6. Download ping (registry only, fire-and-forget).\n  if (resolved.registry) {\n    const anonId = await getInstallId();\n    void resolved.registry.ping(resolved.author, resolved.slug, anonId).catch(() => {});\n  }\n}\n","// A persistent random anonymous install id for download pings (spec §5.4.6 —\n// \"no PII beyond a random anonymous install id\"; dedupe by id per day). Stored\n// alongside the auth token; generated once on first use.\n\nimport fsp from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport { configDir } from \"./config.js\";\n\nfunction idPath(): string {\n  return path.join(configDir(), \"install-id\");\n}\n\nexport async function getInstallId(): Promise<string> {\n  const file = idPath();\n  try {\n    const existing = (await fsp.readFile(file, \"utf8\")).trim();\n    if (existing) return existing;\n  } catch {\n    /* generate below */\n  }\n  const id = randomUUID();\n  try {\n    await fsp.mkdir(configDir(), { recursive: true });\n    await fsp.writeFile(file, id, \"utf8\");\n  } catch {\n    /* non-fatal — a transient id is fine for a ping */\n  }\n  return id;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,OAAiB;;;ACAjB,OAAO,SAAS;AAChB,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAG3B,SAAS,SAAiB;AACxB,SAAO,KAAK,KAAK,UAAU,GAAG,YAAY;AAC5C;AAEA,eAAsB,eAAgC;AACpD,QAAM,OAAO,OAAO;AACpB,MAAI;AACF,UAAM,YAAY,MAAM,IAAI,SAAS,MAAM,MAAM,GAAG,KAAK;AACzD,QAAI,SAAU,QAAO;AAAA,EACvB,QAAQ;AAAA,EAER;AACA,QAAM,KAAK,WAAW;AACtB,MAAI;AACF,UAAM,IAAI,MAAM,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAChD,UAAM,IAAI,UAAU,MAAM,IAAI,MAAM;AAAA,EACtC,QAAQ;AAAA,EAER;AACA,SAAO;AACT;;;ADyCO,SAAS,aAAa,MAAyB;AACpD,MAAI,KAAK,WAAW,SAAS,GAAG;AAC9B,UAAM,OAAO,KAAK,MAAM,UAAU,MAAM;AACxC,UAAMA,SAAQ,KAAK,QAAQ,GAAG;AAC9B,UAAM,WAAWA,WAAU,KAAK,OAAO,KAAK,MAAM,GAAGA,MAAK;AAC1D,UAAM,MAAMA,WAAU,KAAK,KAAK,KAAK,MAAMA,SAAQ,CAAC;AACpD,UAAMC,QAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAC/C,QAAIA,MAAK,SAAS,GAAG;AACnB,YAAM,IAAI,SAAS,yBAAyB,IAAI,mDAA8C;AAAA,QAC5F,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AACA,UAAM,QAAQA,MAAK,CAAC;AACpB,UAAM,OAAOA,MAAK,CAAC;AACnB,UAAM,UAAUA,MAAK,MAAM,CAAC;AAC5B,WAAO;AAAA,MACL,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,SAAS,EAAE,WAAW,QAAQ,KAAK,GAAG,EAAE,IAAI,CAAC;AAAA,MACzD,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;AAAA,IACvB;AAAA,EACF;AACA,QAAM,QAAQ,KAAK,QAAQ,GAAG;AAC9B,QAAM,WAAW,UAAU,KAAK,OAAO,KAAK,MAAM,GAAG,KAAK;AAC1D,QAAM,UAAU,UAAU,KAAK,KAAK,KAAK,MAAM,QAAQ,CAAC;AACxD,QAAM,OAAO,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO;AAC/C,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM,IAAI,SAAS,iBAAiB,IAAI,4EAAuE;AAAA,MAC7G,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACA,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,QAAQ,KAAK,CAAC;AAAA,IACd,MAAM,KAAK,CAAC;AAAA,IACZ,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B;AACF;AAIA,eAAe,oBACb,QACA,UACA,QACA,WAC0B;AAC1B,QAAM,SAAyB,MAAM,SAAS,YAAY,OAAO,QAAS,OAAO,MAAO,OAAO,OAAO;AACtG,QAAM,aAAa,MAAM,qBAAqB,QAAQ,UAAU,QAAQ,SAAS;AACjF,SAAO;AAAA,IACL,UAAU,OAAO;AAAA,IACjB,QAAQ,OAAO;AAAA,IACf,MAAM,OAAO;AAAA,IACb,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,OAAO,WAAW,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,QAAQ,EAAE,OAAO,EAAE;AAAA,IACjF,YAAY;AAAA,IACZ,QAAQ,GAAG,OAAO,MAAM,IAAI,OAAO,IAAI;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,kBACb,QACA,QAC0B;AAC1B,QAAM,EAAE,OAAO,KAAK,IAAI;AACxB,QAAM,YAAY,OAAO,YAAY,GAAG,OAAO,UAAU,QAAQ,QAAQ,EAAE,CAAC,MAAM;AAClF,QAAM,MAAM,MAAM,OAAO,WAAW,OAAQ,MAAO,OAAO,OAAO,MAAM;AAGvE,QAAM,gBAAgB,MAAM,OAAO,aAAa,OAAQ,MAAO,KAAK,GAAG,SAAS,eAAe;AAC/F,MAAI;AACJ,MAAI;AACF,UAAM,iBAAiB,cAAc,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,aAAa,CAAC,CAAC;AACxF,QAAI,CAAC,eAAe,IAAI;AACtB,YAAM,IAAI,SAAS,oBAAoB,KAAK,IAAI,IAAI,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,eAAe;AAAA,QACpF,MAAM;AAAA,QACN,SAAS,eAAe,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAAA,MACrF,CAAC;AAAA,IACH;AACA,eAAW,eAAe;AAAA,EAC5B,SAAS,GAAG;AACV,QAAI,aAAa,SAAU,OAAM;AACjC,UAAM,IAAI,SAAS,sCAAsC,KAAK,IAAI,IAAI,IAAI;AAAA,MACxE,MAAM;AAAA,MACN,SAAS,CAAE,EAAY,OAAO;AAAA,IAChC,CAAC;AAAA,EACH;AAIA,QAAM,QAAkC,CAAC;AACzC,aAAW,OAAO,SAAS,OAAO;AAChC,UAAM,QAAQ,MAAM,OAAO,aAAa,OAAQ,MAAO,KAAK,GAAG,SAAS,GAAG,GAAG,EAAE;AAChF,UAAM,KAAK,EAAE,MAAM,KAAK,OAAO,QAAQ,UAAU,KAAK,EAAE,CAAC;AAAA,EAC3D;AAEA,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,KAAK,IAAI,IAAI;AAAA,IAC/B,MAAM,SAAS;AAAA,IACf,SAAS,SAAS;AAAA,IAClB,WAAW;AAAA,IACX;AAAA,IACA,YAAY;AAAA,IACZ,QAAQ,UAAU,KAAK,IAAI,IAAI,GAAG,OAAO,YAAY,IAAI,OAAO,SAAS,KAAK,EAAE;AAAA,EAClF;AACF;AAIA,eAAe,iBACb,aACA,MACA,OACA,MACsD;AACtD,MAAI,KAAK,KAAK;AACZ,WAAO,EAAE,YAAY,GAAG,WAAW,IAAI,KAAK,IAAI,QAAQ,UAAU,EAAE,CAAC,IAAI,YAAY,KAAK;AAAA,EAC5F;AAEA,QAAM,WAAW,YAAY,aAAa,OAAO,WAAW;AAC5D,MAAI,CAAC,aAAa,QAAQ,EAAG,QAAO,EAAE,YAAY,aAAa,YAAY,MAAM;AAIjF,QAAM,gBAAgB,GAAG,WAAW,IAAI,IAAI;AAC5C,QAAM,cAAc,CAAC,KAAK,OAAO,CAAC,WAAW,KAAK,QAAQ,MAAM;AAChE,MAAI,CAAC,YAAa,QAAO,EAAE,YAAY,eAAe,YAAY,KAAK;AAEvE,QAAM,QAAQ,MAAM,OAAO,gBAAgB;AAC3C,QAAM,SAAS,MAAM,MAAM,OAAO;AAAA,IAChC,SAAS;AAAA,IACT,SAAS;AAAA,MACP,EAAE,OAAO,cAAc,OAAO,qBAAgB,aAAa,kBAAkB;AAAA,MAC7E,EAAE,OAAO,aAAa,OAAO,sBAAsB,WAAW,IAAI;AAAA,IACpE;AAAA,IACA,cAAc;AAAA,EAChB,CAAC;AACD,MAAI,MAAM,SAAS,MAAM,EAAG,OAAM,IAAI,SAAS,IAAI,EAAE,UAAU,GAAG,MAAM,cAAc,CAAC;AACvF,SAAO,WAAW,cACd,EAAE,YAAY,aAAa,YAAY,MAAM,IAC7C,EAAE,YAAY,eAAe,YAAY,KAAK;AACpD;AAIA,eAAsB,WAAW,MAAc,MAAiC;AAC9E,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,YAAY,SAAS,KAAK,SAAS;AACzC,QAAM,SAAS,KAAK,UAAU,IAAI,iBAAiB,EAAE,UAAU,CAAC;AAChE,QAAM,SAAS,aAAa,IAAI;AAGhC,MAAI;AACJ,MAAI,OAAO,YAAY;AACrB,eAAW,MAAM,kBAAkB,QAAQ,MAAM;AAAA,EACnD,OAAO;AACL,UAAM,WAAW,IAAI,eAAe,EAAE,SAAS,gBAAgB,KAAK,QAAQ,GAAG,UAAU,CAAC;AAC1F,eAAW,MAAM,oBAAoB,QAAQ,UAAU,QAAQ,SAAS;AAAA,EAC1E;AAGA,QAAM,EAAE,WAAW,IAAI,MAAM,iBAAiB,KAAK,SAAS,MAAM,SAAS,OAAO,IAAI;AACtF,QAAM,OAAO,YAAY,KAAK,SAAS,OAAO,UAAU;AAGxD,QAAM,WAAW,MAAM,iBAAiB,GAAG;AAC3C,QAAM,OAAO,kBAAkB,SAAS,SAAS,WAAW,cAAc,QAAQ;AAClF,QAAM,cAAc,cAAc;AAAA,IAChC,UAAU,SAAS;AAAA,IACnB,QAAQ,SAAS;AAAA,IACjB,SAAS,SAAS;AAAA,IAClB,mBAAmB;AAAA,IACnB,UAAU,cAAc,IAAI;AAAA,IAC5B;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,UAAU,GAAG,oBAAoB,CAAC,WAAW;AAAA,EAC/C,CAAC;AAED,MAAI,WAAW,GAAG;AAIhB,QAAI,KAAK,UAAU,CAAC,KAAK,KAAK;AAC5B,eAAS;AAAA,QACP,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,QAAQ,SAAS;AAAA,QACjB,MAAM,SAAS;AAAA,QACf,SAAS,SAAS;AAAA,QAClB,WAAW,SAAS;AAAA,QACpB;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,mBAAmB,QAAQ;AAAA,QAC3B,aAAa,SAAS,SAAS;AAAA,QAC/B,KAAK,SAAS,SAAS;AAAA,QACvB,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE,QAAQ,QAAQ,EAAE,OAAO,EAAE;AAAA,MACnF,CAAC;AACD;AAAA,IACF;AAAA,EACF,OAAO;AACL,QAAI,WAAW;AAAA,EACjB;AAGA,QAAM,cAAc,CAAC,KAAK,OAAO,CAAC,WAAW,KAAK,QAAQ,MAAM;AAChE,MAAI,KAAK,QAAQ;AACf,QAAI,CAAC,WAAW,EAAG,KAAI,GAAG,IAAI,oCAA+B,CAAC;AAC9D;AAAA,EACF;AAEA,QAAM,YAAY,KAAK,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW;AAC7D,MAAI,eAAe,UAAU,SAAS,GAAG;AACvC,UAAM,QAAQ,MAAM,OAAO,gBAAgB;AAC3C,UAAM,WAAW,MAAM,MAAM,QAAQ;AAAA,MACnC,SAAS,GAAG,UAAU,MAAM;AAAA,MAC5B,cAAc;AAAA,IAChB,CAAC;AACD,QAAI,CAAC,MAAM,SAAS,QAAQ,KAAK,UAAU;AACzC,iBAAW,KAAK,WAAW;AACzB,YAAI,EAAE;AACN,YAAI,WAAW,KAAK,CAAC,CAAC;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAGA,MAAI,aAAa;AACf,UAAM,QAAQ,MAAM,OAAO,gBAAgB;AAC3C,UAAM,KAAK,MAAM,MAAM,QAAQ,EAAE,SAAS,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE,MAAM,aAAa,cAAc,KAAK,CAAC;AACvI,QAAI,MAAM,SAAS,EAAE,KAAK,CAAC,IAAI;AAC7B,YAAM,IAAI,SAAS,kCAA6B,EAAE,UAAU,GAAG,MAAM,YAAY,CAAC;AAAA,IACpF;AAAA,EACF;AAEA,QAAM,UAAU,KAAK,IAAI;AAGzB,QAAM,cAAsC,CAAC;AAC7C,aAAW,KAAK,KAAM,aAAY,EAAE,MAAM,IAAI,EAAE;AAChD,QAAM,eAAe,KAAK;AAAA,IACxB,QAAQ,SAAS;AAAA,IACjB,MAAM,SAAS;AAAA,IACf,GAAI,SAAS,aAAa,CAAC,IAAI,EAAE,QAAQ,SAAS,OAAO;AAAA,IACzD,SAAS,SAAS;AAAA,IAClB,KAAK,SAAS;AAAA,IACd,GAAI,SAAS,WAAW,EAAE,UAAU,SAAS,SAAS,QAAQ,IAAI,CAAC;AAAA,IACnE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,EACtC,CAAC;AAGD,MAAI,CAAC,WAAW,GAAG;AACjB,UAAM,UAAU,KAAK,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE;AAC7D,QAAI,EAAE;AACN,QAAI,GAAG,MAAM,oBAAe,SAAS,IAAI,IAAI,SAAS,OAAO,KAAK,OAAO,iBAAiB,UAAU,IAAI,CAAC;AACzG,QAAI,EAAE;AACN,QAAI,GAAG,KAAK,aAAa,CAAC;AAC1B,eAAW,QAAQ,iBAAiB,SAAS,UAAU,UAAU,EAAG,KAAI,KAAK,IAAI,EAAE;AAAA,EACrF,OAAO;AACL,aAAS;AAAA,MACP,IAAI;AAAA,MACJ,QAAQ;AAAA,MACR,MAAM,SAAS;AAAA,MACf,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM;AAAA,IAC3E,CAAC;AAAA,EACH;AAGA,MAAI,SAAS,UAAU;AACrB,UAAM,SAAS,MAAM,aAAa;AAClC,SAAK,SAAS,SAAS,KAAK,SAAS,QAAQ,SAAS,MAAM,MAAM,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACpF;AACF;","names":["atIdx","segs"]}

package/dist/chunk-44KDPUYJ.js

@@ -1,49 +0,0 @@
-import {
-  authFilePath,
-  configDir
-} from "./chunk-LP5MV76P.js";
-
-// src/lib/auth.ts
-import fs from "fs";
-import fsp from "fs/promises";
-import path from "path";
-async function saveAuth(record) {
-  const dir = configDir();
-  await fsp.mkdir(dir, { recursive: true });
-  const file = authFilePath();
-  const data = JSON.stringify(record, null, 2);
-  await fsp.writeFile(file, data, { encoding: "utf8", mode: 384 });
-  if (process.platform !== "win32") {
-    await fsp.chmod(file, 384).catch(() => {
-    });
-    await fsp.chmod(dir, 448).catch(() => {
-    });
-  }
-}
-async function loadAuth() {
-  try {
-    const raw = await fsp.readFile(authFilePath(), "utf8");
-    const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed.token === "string" && parsed.token) return parsed;
-    return null;
-  } catch {
-    return null;
-  }
-}
-async function clearAuth() {
-  const file = authFilePath();
-  if (!fs.existsSync(file)) return false;
-  await fsp.rm(file, { force: true });
-  return true;
-}
-function authPathForDisplay() {
-  return path.normalize(authFilePath());
-}
-
-export {
-  saveAuth,
-  loadAuth,
-  clearAuth,
-  authPathForDisplay
-};
-//# sourceMappingURL=chunk-44KDPUYJ.js.map

package/dist/chunk-44KDPUYJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/auth.ts"],"sourcesContent":["// Auth token store (spec §5.3). Cached at ~/.config/castellan/auth.json with\n// 0600 perms on POSIX; on Windows the file is written without chmod (best-effort\n// per spec). `logout` deletes it.\n\nimport fs from \"node:fs\";\nimport fsp from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { authFilePath, configDir } from \"./config.js\";\n\nexport interface AuthRecord {\n  token: string;\n  login?: string;\n  savedAt: string;\n}\n\nexport async function saveAuth(record: AuthRecord): Promise<void> {\n  const dir = configDir();\n  await fsp.mkdir(dir, { recursive: true });\n  const file = authFilePath();\n  const data = JSON.stringify(record, null, 2);\n  // Write then tighten perms (POSIX). On Windows chmod is a no-op / ignored.\n  await fsp.writeFile(file, data, { encoding: \"utf8\", mode: 0o600 });\n  if (process.platform !== \"win32\") {\n    await fsp.chmod(file, 0o600).catch(() => {});\n    await fsp.chmod(dir, 0o700).catch(() => {});\n  }\n}\n\nexport async function loadAuth(): Promise<AuthRecord | null> {\n  try {\n    const raw = await fsp.readFile(authFilePath(), \"utf8\");\n    const parsed = JSON.parse(raw) as AuthRecord;\n    if (parsed && typeof parsed.token === \"string\" && parsed.token) return parsed;\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function clearAuth(): Promise<boolean> {\n  const file = authFilePath();\n  if (!fs.existsSync(file)) return false;\n  await fsp.rm(file, { force: true });\n  return true;\n}\n\nexport function authPathForDisplay(): string {\n  return path.normalize(authFilePath());\n}\n"],"mappings":";;;;;;AAIA,OAAO,QAAQ;AACf,OAAO,SAAS;AAChB,OAAO,UAAU;AASjB,eAAsB,SAAS,QAAmC;AAChE,QAAM,MAAM,UAAU;AACtB,QAAM,IAAI,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACxC,QAAM,OAAO,aAAa;AAC1B,QAAM,OAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AAE3C,QAAM,IAAI,UAAU,MAAM,MAAM,EAAE,UAAU,QAAQ,MAAM,IAAM,CAAC;AACjE,MAAI,QAAQ,aAAa,SAAS;AAChC,UAAM,IAAI,MAAM,MAAM,GAAK,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAC3C,UAAM,IAAI,MAAM,KAAK,GAAK,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC5C;AACF;AAEA,eAAsB,WAAuC;AAC3D,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,SAAS,aAAa,GAAG,MAAM;AACrD,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,UAAU,OAAO,OAAO,UAAU,YAAY,OAAO,MAAO,QAAO;AACvE,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,YAA8B;AAClD,QAAM,OAAO,aAAa;AAC1B,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,IAAI,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;AAClC,SAAO;AACT;AAEO,SAAS,qBAA6B;AAC3C,SAAO,KAAK,UAAU,aAAa,CAAC;AACtC;","names":[]}

package/dist/chunk-5VPKMXSV.js

@@ -1,190 +0,0 @@
-import {
-  USER_AGENT
-} from "./chunk-LP5MV76P.js";
-import {
-  BrowseResponseSchema,
-  ErrorEnvelopeSchema,
-  WorkflowRecordSchema
-} from "./chunk-AHRTPV2C.js";
-import {
-  CliError
-} from "./chunk-6CWCR5SO.js";
-
-// src/lib/http.ts
-function getFetch(inject) {
-  const f = inject ?? globalThis.fetch;
-  if (!f) {
-    throw new CliError(
-      "global fetch is unavailable \u2014 Node 20+ is required",
-      { code: "E_NO_FETCH" }
-    );
-  }
-  return f;
-}
-async function doFetch(fetchImpl, url, init) {
-  try {
-    return await fetchImpl(url, init);
-  } catch (e) {
-    throw new CliError(`network request failed: ${url}`, {
-      code: "E_NETWORK",
-      details: [e.message]
-    });
-  }
-}
-
-// src/lib/registry.ts
-var RegistryClient = class {
-  baseUrl;
-  fetchImpl;
-  constructor(opts) {
-    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
-    this.fetchImpl = getFetch(opts.fetchImpl);
-  }
-  url(pathname, params) {
-    const u = new URL(this.baseUrl + pathname);
-    if (params) {
-      for (const [k, v] of Object.entries(params)) {
-        if (v !== void 0 && v !== "") u.searchParams.set(k, v);
-      }
-    }
-    return u.toString();
-  }
-  /** GET /api/workflows/:author/:slug?version= — resolved workflow record. */
-  async getWorkflow(author, slug, version) {
-    const url = this.url(
-      `/api/workflows/${encodeURIComponent(author)}/${encodeURIComponent(slug)}`,
-      version ? { version } : void 0
-    );
-    const res = await doFetch(this.fetchImpl, url, {
-      headers: { accept: "application/json", "user-agent": USER_AGENT }
-    });
-    if (!res.ok) throw await this.httpError(res, url);
-    const json = await this.json(res, url);
-    const parsed = WorkflowRecordSchema.safeParse(json);
-    if (!parsed.success) {
-      throw new CliError(`registry returned an unexpected workflow record: ${url}`, {
-        code: "E_BAD_RESPONSE",
-        details: parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`)
-      });
-    }
-    return parsed.data;
-  }
-  /** GET /api/workflows?q=&... — browse/search cards. */
-  async search(query, opts = {}) {
-    const url = this.url("/api/workflows", {
-      q: query || void 0,
-      sort: opts.sort,
-      page: opts.page ? String(opts.page) : void 0,
-      tags: opts.tags,
-      agentProvider: opts.agentProvider,
-      sandboxProvider: opts.sandboxProvider
-    });
-    const res = await doFetch(this.fetchImpl, url, {
-      headers: { accept: "application/json", "user-agent": USER_AGENT }
-    });
-    if (!res.ok) throw await this.httpError(res, url);
-    const json = await this.json(res, url);
-    const parsed = BrowseResponseSchema.safeParse(json);
-    if (!parsed.success) {
-      throw new CliError(`registry returned an unexpected browse response: ${url}`, {
-        code: "E_BAD_RESPONSE",
-        details: parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`)
-      });
-    }
-    return parsed.data;
-  }
-  /**
-   * URL of the registry's cached file endpoint (spec §6 — the CLI's primary
-   * download source): GET /api/workflows/:author/:slug/files/:version/*path
-   */
-  fileUrl(author, slug, version, filePath) {
-    const segs = filePath.split("/").map(encodeURIComponent).join("/");
-    return `${this.baseUrl}/api/workflows/${encodeURIComponent(author)}/${encodeURIComponent(slug)}/files/${encodeURIComponent(version)}/${segs}`;
-  }
-  /** POST /api/workflows — publish (auth: GitHub OAuth bearer token). */
-  async publish(body, token) {
-    const url = this.url("/api/workflows");
-    const res = await doFetch(this.fetchImpl, url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        accept: "application/json",
-        authorization: `Bearer ${token}`,
-        "user-agent": USER_AGENT
-      },
-      body: JSON.stringify(body)
-    });
-    const json = await res.json().catch(() => void 0);
-    if (res.status === 409) {
-      throw new CliError(
-        `version ${body.manifest.version} of ${body.manifest.slug} is already published (versions are immutable)`,
-        { code: "E_DUPLICATE_VERSION" }
-      );
-    }
-    if (!res.ok) {
-      const env = ErrorEnvelopeSchema.safeParse(json);
-      const detail = env.success ? `${env.data.error.code}: ${env.data.error.message}` : `HTTP ${res.status}`;
-      throw new CliError(`publish failed: ${url}`, {
-        code: "E_PUBLISH_FAILED",
-        details: [detail]
-      });
-    }
-    return { status: res.status, body: json };
-  }
-  /**
-   * POST /api/workflows/:author/:slug/downloads — fire-and-forget install ping.
-   * Never throws; a failed ping must not affect a successful install (spec
-   * §5.4.6). Author and slug are separate path segments (encoding "author/slug"
-   * as one component collapses the "/" to %2F and the two-segment route 405s).
-   */
-  async ping(author, slug, anonInstallId) {
-    const url = this.url(
-      `/api/workflows/${encodeURIComponent(author)}/${encodeURIComponent(slug)}/downloads`
-    );
-    try {
-      await this.fetchImpl(url, {
-        method: "POST",
-        headers: { "content-type": "application/json", "user-agent": USER_AGENT },
-        body: JSON.stringify({ anonInstallId })
-      });
-    } catch {
-    }
-  }
-  async json(res, url) {
-    try {
-      return await res.json();
-    } catch {
-      throw new CliError(`registry returned invalid JSON: ${url}`, {
-        code: "E_BAD_RESPONSE"
-      });
-    }
-  }
-  async httpError(res, url) {
-    const json = await res.json().catch(() => void 0);
-    const env = ErrorEnvelopeSchema.safeParse(json);
-    if (res.status === 404) {
-      return new CliError(`not found: ${url}`, {
-        code: "E_NOT_FOUND",
-        details: env.success ? [env.data.error.message] : []
-      });
-    }
-    if (res.status === 410) {
-      return new CliError(`this workflow version has been withdrawn (410): ${url}`, {
-        code: "E_GONE",
-        details: env.success ? [env.data.error.message] : []
-      });
-    }
-    const detail = env.success ? `${env.data.error.code}: ${env.data.error.message}` : `HTTP ${res.status} ${res.statusText}`;
-    return new CliError(`registry request failed: ${url}`, {
-      code: "E_HTTP",
-      details: [detail]
-    });
-  }
-};
-
-export {
-  getFetch,
-  doFetch,
-  RegistryClient
-};
-//# sourceMappingURL=chunk-5VPKMXSV.js.map

package/dist/chunk-5VPKMXSV.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/http.ts","../src/lib/registry.ts"],"sourcesContent":["// Thin fetch wrapper. Every network failure must be actionable and include the\n// URL tried (spec §5.7). Injectable fetch keeps clients testable without a\n// global mock, though msw intercepts the real global fetch in e2e tests.\n\nimport { CliError } from \"./errors.js\";\n\nexport type FetchLike = typeof fetch;\n\nexport function getFetch(inject?: FetchLike): FetchLike {\n  const f = inject ?? globalThis.fetch;\n  if (!f) {\n    throw new CliError(\n      \"global fetch is unavailable — Node 20+ is required\",\n      { code: \"E_NO_FETCH\" },\n    );\n  }\n  return f;\n}\n\n/** Perform a fetch, converting network-layer failures into a CliError with the URL. */\nexport async function doFetch(\n  fetchImpl: FetchLike,\n  url: string,\n  init?: RequestInit,\n): Promise<Response> {\n  try {\n    return await fetchImpl(url, init);\n  } catch (e) {\n    throw new CliError(`network request failed: ${url}`, {\n      code: \"E_NETWORK\",\n      details: [(e as Error).message],\n    });\n  }\n}\n","// Registry API client (spec §6). Built from the frozen zod schemas in\n// @castellan/schema so request/response shapes are never restated. Every error\n// includes the URL tried and, when present, the server's error envelope.\n\nimport {\n  BrowseResponseSchema,\n  ErrorEnvelopeSchema,\n  WorkflowRecordSchema,\n  type BrowseResponse,\n  type PublishRequest,\n  type WorkflowRecord,\n} from \"@castellan/schema\";\nimport { CliError } from \"./errors.js\";\nimport { doFetch, getFetch, type FetchLike } from \"./http.js\";\nimport { USER_AGENT } from \"./config.js\";\n\nexport interface RegistryClientOptions {\n  baseUrl: string;\n  fetchImpl?: FetchLike;\n}\n\nexport class RegistryClient {\n  readonly baseUrl: string;\n  private readonly fetchImpl: FetchLike;\n\n  constructor(opts: RegistryClientOptions) {\n    this.baseUrl = opts.baseUrl.replace(/\\/+$/, \"\");\n    this.fetchImpl = getFetch(opts.fetchImpl);\n  }\n\n  private url(pathname: string, params?: Record<string, string | undefined>): string {\n    const u = new URL(this.baseUrl + pathname);\n    if (params) {\n      for (const [k, v] of Object.entries(params)) {\n        if (v !== undefined && v !== \"\") u.searchParams.set(k, v);\n      }\n    }\n    return u.toString();\n  }\n\n  /** GET /api/workflows/:author/:slug?version= — resolved workflow record. */\n  async getWorkflow(\n    author: string,\n    slug: string,\n    version?: string,\n  ): Promise<WorkflowRecord> {\n    const url = this.url(\n      `/api/workflows/${encodeURIComponent(author)}/${encodeURIComponent(slug)}`,\n      version ? { version } : undefined,\n    );\n    const res = await doFetch(this.fetchImpl, url, {\n      headers: { accept: \"application/json\", \"user-agent\": USER_AGENT },\n    });\n    if (!res.ok) throw await this.httpError(res, url);\n    const json = await this.json(res, url);\n    const parsed = WorkflowRecordSchema.safeParse(json);\n    if (!parsed.success) {\n      throw new CliError(`registry returned an unexpected workflow record: ${url}`, {\n        code: \"E_BAD_RESPONSE\",\n        details: parsed.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`),\n      });\n    }\n    return parsed.data;\n  }\n\n  /** GET /api/workflows?q=&... — browse/search cards. */\n  async search(\n    query: string,\n    opts: { sort?: string; page?: number; tags?: string; agentProvider?: string; sandboxProvider?: string } = {},\n  ): Promise<BrowseResponse> {\n    const url = this.url(\"/api/workflows\", {\n      q: query || undefined,\n      sort: opts.sort,\n      page: opts.page ? String(opts.page) : undefined,\n      tags: opts.tags,\n      agentProvider: opts.agentProvider,\n      sandboxProvider: opts.sandboxProvider,\n    });\n    const res = await doFetch(this.fetchImpl, url, {\n      headers: { accept: \"application/json\", \"user-agent\": USER_AGENT },\n    });\n    if (!res.ok) throw await this.httpError(res, url);\n    const json = await this.json(res, url);\n    const parsed = BrowseResponseSchema.safeParse(json);\n    if (!parsed.success) {\n      throw new CliError(`registry returned an unexpected browse response: ${url}`, {\n        code: \"E_BAD_RESPONSE\",\n        details: parsed.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`),\n      });\n    }\n    return parsed.data;\n  }\n\n  /**\n   * URL of the registry's cached file endpoint (spec §6 — the CLI's primary\n   * download source): GET /api/workflows/:author/:slug/files/:version/*path\n   */\n  fileUrl(author: string, slug: string, version: string, filePath: string): string {\n    const segs = filePath.split(\"/\").map(encodeURIComponent).join(\"/\");\n    return (\n      `${this.baseUrl}/api/workflows/${encodeURIComponent(author)}/` +\n      `${encodeURIComponent(slug)}/files/${encodeURIComponent(version)}/${segs}`\n    );\n  }\n\n  /** POST /api/workflows — publish (auth: GitHub OAuth bearer token). */\n  async publish(\n    body: PublishRequest,\n    token: string,\n  ): Promise<{ status: number; body: unknown }> {\n    const url = this.url(\"/api/workflows\");\n    const res = await doFetch(this.fetchImpl, url, {\n      method: \"POST\",\n      headers: {\n        \"content-type\": \"application/json\",\n        accept: \"application/json\",\n        authorization: `Bearer ${token}`,\n        \"user-agent\": USER_AGENT,\n      },\n      body: JSON.stringify(body),\n    });\n    const json = await res.json().catch(() => undefined);\n    if (res.status === 409) {\n      throw new CliError(\n        `version ${body.manifest.version} of ${body.manifest.slug} is already published (versions are immutable)`,\n        { code: \"E_DUPLICATE_VERSION\" },\n      );\n    }\n    if (!res.ok) {\n      const env = ErrorEnvelopeSchema.safeParse(json);\n      const detail = env.success ? `${env.data.error.code}: ${env.data.error.message}` : `HTTP ${res.status}`;\n      throw new CliError(`publish failed: ${url}`, {\n        code: \"E_PUBLISH_FAILED\",\n        details: [detail],\n      });\n    }\n    return { status: res.status, body: json };\n  }\n\n  /**\n   * POST /api/workflows/:author/:slug/downloads — fire-and-forget install ping.\n   * Never throws; a failed ping must not affect a successful install (spec\n   * §5.4.6). Author and slug are separate path segments (encoding \"author/slug\"\n   * as one component collapses the \"/\" to %2F and the two-segment route 405s).\n   */\n  async ping(author: string, slug: string, anonInstallId: string): Promise<void> {\n    const url = this.url(\n      `/api/workflows/${encodeURIComponent(author)}/${encodeURIComponent(slug)}/downloads`,\n    );\n    try {\n      await this.fetchImpl(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\", \"user-agent\": USER_AGENT },\n        body: JSON.stringify({ anonInstallId }),\n      });\n    } catch {\n      /* fire-and-forget */\n    }\n  }\n\n  private async json(res: Response, url: string): Promise<unknown> {\n    try {\n      return await res.json();\n    } catch {\n      throw new CliError(`registry returned invalid JSON: ${url}`, {\n        code: \"E_BAD_RESPONSE\",\n      });\n    }\n  }\n\n  private async httpError(res: Response, url: string): Promise<CliError> {\n    const json = await res.json().catch(() => undefined);\n    const env = ErrorEnvelopeSchema.safeParse(json);\n    if (res.status === 404) {\n      return new CliError(`not found: ${url}`, {\n        code: \"E_NOT_FOUND\",\n        details: env.success ? [env.data.error.message] : [],\n      });\n    }\n    if (res.status === 410) {\n      return new CliError(`this workflow version has been withdrawn (410): ${url}`, {\n        code: \"E_GONE\",\n        details: env.success ? [env.data.error.message] : [],\n      });\n    }\n    const detail = env.success\n      ? `${env.data.error.code}: ${env.data.error.message}`\n      : `HTTP ${res.status} ${res.statusText}`;\n    return new CliError(`registry request failed: ${url}`, {\n      code: \"E_HTTP\",\n      details: [detail],\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAQO,SAAS,SAAS,QAA+B;AACtD,QAAM,IAAI,UAAU,WAAW;AAC/B,MAAI,CAAC,GAAG;AACN,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,MAAM,aAAa;AAAA,IACvB;AAAA,EACF;AACA,SAAO;AACT;AAGA,eAAsB,QACpB,WACA,KACA,MACmB;AACnB,MAAI;AACF,WAAO,MAAM,UAAU,KAAK,IAAI;AAAA,EAClC,SAAS,GAAG;AACV,UAAM,IAAI,SAAS,2BAA2B,GAAG,IAAI;AAAA,MACnD,MAAM;AAAA,MACN,SAAS,CAAE,EAAY,OAAO;AAAA,IAChC,CAAC;AAAA,EACH;AACF;;;ACZO,IAAM,iBAAN,MAAqB;AAAA,EACjB;AAAA,EACQ;AAAA,EAEjB,YAAY,MAA6B;AACvC,SAAK,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAC9C,SAAK,YAAY,SAAS,KAAK,SAAS;AAAA,EAC1C;AAAA,EAEQ,IAAI,UAAkB,QAAqD;AACjF,UAAM,IAAI,IAAI,IAAI,KAAK,UAAU,QAAQ;AACzC,QAAI,QAAQ;AACV,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,MAAM,UAAa,MAAM,GAAI,GAAE,aAAa,IAAI,GAAG,CAAC;AAAA,MAC1D;AAAA,IACF;AACA,WAAO,EAAE,SAAS;AAAA,EACpB;AAAA;AAAA,EAGA,MAAM,YACJ,QACA,MACA,SACyB;AACzB,UAAM,MAAM,KAAK;AAAA,MACf,kBAAkB,mBAAmB,MAAM,CAAC,IAAI,mBAAmB,IAAI,CAAC;AAAA,MACxE,UAAU,EAAE,QAAQ,IAAI;AAAA,IAC1B;AACA,UAAM,MAAM,MAAM,QAAQ,KAAK,WAAW,KAAK;AAAA,MAC7C,SAAS,EAAE,QAAQ,oBAAoB,cAAc,WAAW;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,KAAK,UAAU,KAAK,GAAG;AAChD,UAAM,OAAO,MAAM,KAAK,KAAK,KAAK,GAAG;AACrC,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,SAAS,oDAAoD,GAAG,IAAI;AAAA,QAC5E,MAAM;AAAA,QACN,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAAA,MAC7E,CAAC;AAAA,IACH;AACA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA,EAGA,MAAM,OACJ,OACA,OAA0G,CAAC,GAClF;AACzB,UAAM,MAAM,KAAK,IAAI,kBAAkB;AAAA,MACrC,GAAG,SAAS;AAAA,MACZ,MAAM,KAAK;AAAA,MACX,MAAM,KAAK,OAAO,OAAO,KAAK,IAAI,IAAI;AAAA,MACtC,MAAM,KAAK;AAAA,MACX,eAAe,KAAK;AAAA,MACpB,iBAAiB,KAAK;AAAA,IACxB,CAAC;AACD,UAAM,MAAM,MAAM,QAAQ,KAAK,WAAW,KAAK;AAAA,MAC7C,SAAS,EAAE,QAAQ,oBAAoB,cAAc,WAAW;AAAA,IAClE,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,MAAM,KAAK,UAAU,KAAK,GAAG;AAChD,UAAM,OAAO,MAAM,KAAK,KAAK,KAAK,GAAG;AACrC,UAAM,SAAS,qBAAqB,UAAU,IAAI;AAClD,QAAI,CAAC,OAAO,SAAS;AACnB,YAAM,IAAI,SAAS,oDAAoD,GAAG,IAAI;AAAA,QAC5E,MAAM;AAAA,QACN,SAAS,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;AAAA,MAC7E,CAAC;AAAA,IACH;AACA,WAAO,OAAO;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,QAAgB,MAAc,SAAiB,UAA0B;AAC/E,UAAM,OAAO,SAAS,MAAM,GAAG,EAAE,IAAI,kBAAkB,EAAE,KAAK,GAAG;AACjE,WACE,GAAG,KAAK,OAAO,kBAAkB,mBAAmB,MAAM,CAAC,IACxD,mBAAmB,IAAI,CAAC,UAAU,mBAAmB,OAAO,CAAC,IAAI,IAAI;AAAA,EAE5E;AAAA;AAAA,EAGA,MAAM,QACJ,MACA,OAC4C;AAC5C,UAAM,MAAM,KAAK,IAAI,gBAAgB;AACrC,UAAM,MAAM,MAAM,QAAQ,KAAK,WAAW,KAAK;AAAA,MAC7C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,eAAe,UAAU,KAAK;AAAA,QAC9B,cAAc;AAAA,MAChB;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,MAAS;AACnD,QAAI,IAAI,WAAW,KAAK;AACtB,YAAM,IAAI;AAAA,QACR,WAAW,KAAK,SAAS,OAAO,OAAO,KAAK,SAAS,IAAI;AAAA,QACzD,EAAE,MAAM,sBAAsB;AAAA,MAChC;AAAA,IACF;AACA,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,MAAM,oBAAoB,UAAU,IAAI;AAC9C,YAAM,SAAS,IAAI,UAAU,GAAG,IAAI,KAAK,MAAM,IAAI,KAAK,IAAI,KAAK,MAAM,OAAO,KAAK,QAAQ,IAAI,MAAM;AACrG,YAAM,IAAI,SAAS,mBAAmB,GAAG,IAAI;AAAA,QAC3C,MAAM;AAAA,QACN,SAAS,CAAC,MAAM;AAAA,MAClB,CAAC;AAAA,IACH;AACA,WAAO,EAAE,QAAQ,IAAI,QAAQ,MAAM,KAAK;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAK,QAAgB,MAAc,eAAsC;AAC7E,UAAM,MAAM,KAAK;AAAA,MACf,kBAAkB,mBAAmB,MAAM,CAAC,IAAI,mBAAmB,IAAI,CAAC;AAAA,IAC1E;AACA,QAAI;AACF,YAAM,KAAK,UAAU,KAAK;AAAA,QACxB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,oBAAoB,cAAc,WAAW;AAAA,QACxE,MAAM,KAAK,UAAU,EAAE,cAAc,CAAC;AAAA,MACxC,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,KAAK,KAAe,KAA+B;AAC/D,QAAI;AACF,aAAO,MAAM,IAAI,KAAK;AAAA,IACxB,QAAQ;AACN,YAAM,IAAI,SAAS,mCAAmC,GAAG,IAAI;AAAA,QAC3D,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,UAAU,KAAe,KAAgC;AACrE,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,MAAS;AACnD,UAAM,MAAM,oBAAoB,UAAU,IAAI;AAC9C,QAAI,IAAI,WAAW,KAAK;AACtB,aAAO,IAAI,SAAS,cAAc,GAAG,IAAI;AAAA,QACvC,MAAM;AAAA,QACN,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,OAAO,IAAI,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AACA,QAAI,IAAI,WAAW,KAAK;AACtB,aAAO,IAAI,SAAS,mDAAmD,GAAG,IAAI;AAAA,QAC5E,MAAM;AAAA,QACN,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,OAAO,IAAI,CAAC;AAAA,MACrD,CAAC;AAAA,IACH;AACA,UAAM,SAAS,IAAI,UACf,GAAG,IAAI,KAAK,MAAM,IAAI,KAAK,IAAI,KAAK,MAAM,OAAO,KACjD,QAAQ,IAAI,MAAM,IAAI,IAAI,UAAU;AACxC,WAAO,IAAI,SAAS,4BAA4B,GAAG,IAAI;AAAA,MACrD,MAAM;AAAA,MACN,SAAS,CAAC,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/chunk-6CWCR5SO.js

@@ -1,24 +0,0 @@
-// src/lib/errors.ts
-var CliError = class extends Error {
-  exitCode;
-  /** Optional stable machine code (e.g. a validation code or "E_CHECKSUM"). */
-  code;
-  /** Extra lines printed under the message (hints, URLs tried). */
-  details;
-  constructor(message, opts = {}) {
-    super(message);
-    this.name = "CliError";
-    this.exitCode = opts.exitCode ?? 1;
-    this.code = opts.code;
-    this.details = opts.details ?? [];
-  }
-};
-function isCliError(e) {
-  return e instanceof CliError;
-}
-
-export {
-  CliError,
-  isCliError
-};
-//# sourceMappingURL=chunk-6CWCR5SO.js.map

package/dist/chunk-6CWCR5SO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/errors.ts"],"sourcesContent":["// A typed error the top-level handler renders cleanly (no stack) and maps to a\n// process exit code. Everything the user should see as an actionable failure is\n// thrown as a CliError.\n\nexport class CliError extends Error {\n  readonly exitCode: number;\n  /** Optional stable machine code (e.g. a validation code or \"E_CHECKSUM\"). */\n  readonly code: string | undefined;\n  /** Extra lines printed under the message (hints, URLs tried). */\n  readonly details: string[];\n\n  constructor(\n    message: string,\n    opts: { exitCode?: number; code?: string; details?: string[] } = {},\n  ) {\n    super(message);\n    this.name = \"CliError\";\n    this.exitCode = opts.exitCode ?? 1;\n    this.code = opts.code;\n    this.details = opts.details ?? [];\n  }\n}\n\n/** True for our own actionable errors (rendered without a stack trace). */\nexport function isCliError(e: unknown): e is CliError {\n  return e instanceof CliError;\n}\n"],"mappings":";AAIO,IAAM,WAAN,cAAuB,MAAM;AAAA,EACzB;AAAA;AAAA,EAEA;AAAA;AAAA,EAEA;AAAA,EAET,YACE,SACA,OAAiE,CAAC,GAClE;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,WAAW,KAAK,YAAY;AACjC,SAAK,OAAO,KAAK;AACjB,SAAK,UAAU,KAAK,WAAW,CAAC;AAAA,EAClC;AACF;AAGO,SAAS,WAAW,GAA2B;AACpD,SAAO,aAAa;AACtB;","names":[]}